Start free

Browse › Security Operations Practitioner

Hunt Threats Using Intelligence and Rule-Based Detection

Guided

Part of Security Operations Practitioner Topic: Blue Team

Counts towardsCompTIA SecurityX badge

Access

StationX Infrastructure Labs — 3 attempts per lab

🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this lab, you will conduct a targeted threat hunt by using real tools and pre-staged telemetry.

  1. Form a hunting hypothesis from the threat intelligence brief and isolate the suspicious packets
  2. Execute a real hunt in Splunk Search & Reporting against staged indexed web telemetry
  3. Tune the hunt into a reusable Splunk detection and validate that it returns the suspicious activity

Note: Once you begin the lab, you will not be able to pause, save, or return to your lab. Please ensure that you have set aside enough time to complete the lab before you start."

Roadmaps that use this lab