A practical learning space for students and SOC beginners to study, play, investigate and build real analyst thinking — from networking and logs to EDR, NDR, SIEM, threat hunting and incident triage.
Meet the RR CyberLab Android app: a growing set of focused training modules for exploring SOC triage, endpoint and network security, Cyber Chess, incident response, and more.
RR CYBERLAB MOBILETRAIN · INVESTIGATE · DEFENDStart with a concept. Open a tool. Follow a simulated attack. Make a triage decision. Then read the deeper investigation guide.
Investigate fourteen fictional cases in Guided or Free Explore mode. Use safe Linux-style commands, correlate synthetic evidence and review a scored incident report.
Start a mission → NETWORK LABBuild a safe network, follow packet flow and see how attack activity changes endpoint and security telemetry.
Build a network → ENDPOINT LABRun guided or open endpoint scenarios and compare simulated process, file, identity and network changes across Windows, Linux and macOS.
Explore endpoint behaviour →NEW • CYBER RANGELearn IT foundations, simulate attacker actions, observe endpoint behaviour and defend a fictional network.
Enter Cyber Range →INTERACTIVE LABWatch simulated attacks unfold across network + endpoint + identity, then investigate, hunt and triage like a SOC analyst.
Enter the lab → PLAYABLE LEARNINGTake attacker and defender turns in Cyber Chess, then investigate fictional evidence and make a SOC triage decision.
Play the games → TRAININGBuild from networking and systems to logs, SIEM, EDR/NDR, incident response and threat hunting.
Explore training → SECURITY TOOLSUse practical browser-based utilities for hashes, JWTs, Base64, URLs, ports, regex and IOC investigation.
Open tools → DETAILED GUIDESGo deeper into DNS, authentication, PowerShell, Windows events, lateral movement, MITRE and more.
Study the guides → GRC · GOVERNANCE / RISK / COMPLIANCETurn security findings into risks, controls, owners and evidence. Practice with a local risk register and connect SIEM, NDR and EDR signals to governance decisions.
Open GRC guide →See what happened and identify the important signal.
Understand the technique, evidence and MITRE ATT&CK context.
Ask what else you would check across logs, network and endpoint data.
Make a decision and learn the reasoning behind the analyst response.
Come back, try another scenario, learn another technique and build investigation confidence one case at a time.