A practical learning space for students and SOC beginners to study, play, investigate and build real analyst thinking — from networking and logs to EDR, NDR, SIEM, threat hunting and incident triage.
In RR Cyber Wars you build a cyber HQ, scout fictional rivals, then survive a phased incident. Alerts fire, evidence lands in the logs, and you have 15 seconds to choose your response. What your tools can see decides what you catch.
Meet the RR CyberLab Android app: a growing set of focused training modules for exploring SOC triage, endpoint and network security, Cyber Chess, incident response, and more.
RR CYBERLAB MOBILETRAIN · INVESTIGATE · DEFENDStart with a concept. Open a tool. Follow a simulated attack. Make a triage decision. Then read the deeper investigation guide.
Investigate fictional cases in Guided or Free Explore mode. Use safe Linux-style commands, correlate synthetic evidence and review a scored incident report.
Start a mission → NETWORK LABBuild a safe network, follow packet flow and see how attack activity changes endpoint and security telemetry.
Build a network → ENDPOINT LABRun guided or open endpoint scenarios and compare simulated process, file, identity and network changes across Windows, Linux and macOS.
Explore endpoint behaviour →NEW • CYBER RANGELearn IT foundations, simulate attacker actions, observe endpoint behaviour and defend a fictional network.
Enter Cyber Range →INTERACTIVE LABWatch simulated attacks unfold across network + endpoint + identity, then investigate, hunt and triage like a SOC analyst.
Enter the lab → PLAYABLE LEARNINGTake attacker and defender turns in Cyber Chess, then investigate fictional evidence and make a SOC triage decision.
Play the games → TRAININGBuild from networking and systems to logs, SIEM, EDR/NDR, incident response and threat hunting.
Explore training → SECURITY TOOLSUse practical browser-based utilities for hashes, JWTs, Base64, URLs, ports, regex and IOC investigation.
Open tools → DETAILED GUIDESGo deeper into DNS, authentication, PowerShell, Windows events, lateral movement, MITRE and more.
Study the guides → GRC • RISK & COMPLIANCETurn security findings into risks, controls, owners and evidence. Practice with a local risk register and connect SIEM, NDR and EDR signals to governance decisions.
Open GRC guide → NEW • STRATEGY GAMEBuild your HQ, scout fictional rivals and survive a phased live incident. Your tools decide what you can detect.
Launch Cyber Wars → NEW • 11 QUICK MISSIONSRansomware, phishing, public Wi-Fi, SQL injection and more. Pick the right move in 20 seconds and see what goes wrong if you pick badly.
Play Cyber Move → CYBER GAMES ARCADEPhishing Detective, Packet Hunter, SOC Alert Rush, Malware Outbreak and more. Short rounds, real analyst habits.
Open the arcade →See what happened and identify the important signal.
Understand the technique, evidence and MITRE ATT&CK context.
Ask what else you would check across logs, network and endpoint data.
Make a decision and learn the reasoning behind the analyst response.
RR CyberLabs is created by Rakesh R, a cybersecurity practitioner with 10+ years of IT and security experience across SOC, EDR and NDR work. Every lab, game and guide is built around one rule: evidence before assumptions.
Come back, try another scenario, learn another technique and build investigation confidence one case at a time.