⚠️
Simulated terminal and incident. This is a hand-built approximation of a single compromised host — real fake logs, processes, and files you can actually investigate — for practicing an incident-response workflow safely. It is not a real machine and nothing here touches your computer or the internet. This course's Active Directory, SIEM, and cloud labs need real multi-machine environments that can't fit in a browser tab — see the lab specifications for those.