Browse › Security Operations Practitioner

Hunt Threats Using Intelligence and Rule-Based Detection
Part of Security Operations Practitioner Topic: Blue Team
Access
StationX Infrastructure Labs — 3 attempts per lab
🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
In this lab, you will conduct a targeted threat hunt by using real tools and pre-staged telemetry.
- Form a hunting hypothesis from the threat intelligence brief and isolate the suspicious packets
- Execute a real hunt in Splunk Search & Reporting against staged indexed web telemetry
- Tune the hunt into a reusable Splunk detection and validate that it returns the suspicious activity
Note: Once you begin the lab, you will not be able to pause, save, or return to your lab. Please ensure that you have set aside enough time to complete the lab before you start."
- ⏱ About 60 minutes
- Counts towards: SecurityX (exam CAS-005)
Roadmaps that use this lab
- SOC Analyst — career path — step 3: Foundations of defence
- Advanced Security Practice — SecurityX (CAS-005) practice labs — step 2: Security engineering
- Threat Hunter — career path — step 2: SOC foundations
- Security Architect — career path — step 4: Architecture at scale




