ColdCase Labs

Meet ColdCase Labs

ColdCase Labs teaches defensive security through short investigations. Open a case file and follow the evidence left by an incident, from a suspicious invoice to an attempted break-in on a file server. Packet captures, email contents and malware reports give each question a concrete answer to look for. Beginners can follow a walkthrough that explains what to inspect and how to interpret it. Challenge cases leave more of the investigation to the reader. Each lab lists its difficulty and approximate duration, so learners can pick a case that fits the time they have.