Available now
PRO · GUIDED LAB
Incident Response Lab 1 — Ransomware First Response
A complete first-response exercise: prioritize containment, preserve evidence, evaluate recovery and produce a reasoned incident update.
Synthetic evidence, learner tasks and complete worked reviews.
Open guided lab →What you can do today
- Identify immediate safety and business priorities
- Distinguish evidence preservation from containment decisions
- Escalate using the incident communication plan
Work through the supplied fictional evidence, write your decisions and compare them with complete worked answers. Use the review rubric and practical takeaway to improve your next handoff. These are self-directed guided exercises, without individual marking or a saved completion record.
Coming next 3 planned modules
These modules are planned for the expanding Pro curriculum and are not counted as available content yet.
- Evidence timeline
- Containment and recovery exercise
- Final incident report
Release timing will be announced when each module is ready.