Defend The Org retweeted
Stop watching YouTube videos and answering generic cybersecurity questions.
Put those months of studying to the test.
Get your hands dirty. Investigate alerts, analyse logs, hunt threats, investigate suspicious activity, and work through real-world SOC analyst scenarios in practical labs.
Knowledge is good. But can you apply it when it matters?
Challenge yourself. Stop preparing forever and start practising.
CALLING ALL SOC ANALYSTS - NEW LAB ALERT 🚨
A shell was opened inside a live card-authorization pod early on a Wednesday morning.
We need you to investigate what happened and what the Org needs to do next.
LIVE NOW AT DTO 🛡️
🛡️ NEW COURSE: IAM BASICS
Identity is one of the most important and foundational parts of cybersecurity.
Build your foundation in Identity & Access Management and start thinking like a real security engineer.
Ready to level up? Check it out now.
🚨 TIME TO TEST YOUR DETECTION ENGINEERING SKILLS 🚨
THE WEEK 7 CHALLENGE IS HERE...
Identify PowerShell processes patterns that are commonly used by attackers to evade detection.
Available FREE - at DefendTheOrg.
🚨 NEW INCIDENT RESPONSE LAB - OPEN SECRET
Trace the attacker’s activity, cut off access, find what they left running, and get Brightwell back to safety.
Can you contain the breach? 🛡️
Still hungry for a challenge after yesterday’s Weekly Gauntlet?
The Daily Signal is here. 🛡️
Put your blue team skills to the test, sharpen your instincts, and build your skills one day at a time.
New day. New challenge. Every day on DTO.
💡 LIGHTS OUT 💡
This week, put your MITRE ATT&CK knowledge to the test with a new hands-on challenge.
Analyze the scenario. Identify the techniques. Test your knowledge.
➡️ Free accounts can participate, too.
Think you can solve it?
If you're logging in and studying cybersecurity after work today, ON A FRIDAY 😱 We see you and we salute you, Defender 🫡📈📈
🚨 NEW SCRIPTING LAB IS HERE ⌨️
Write a tool that can determinstically detect Brute Force Attacks.
Live Now - at DefendTheOrg
🚨 DRILLS ARE HERE 🫡
You no longer need an hour of free time to keep getting better at cybersecurity.
That's the idea behind Drills - short, interactive challenges that make it easier to build your blue team skills a little at a time.
LIVE NOW ON DEFENDTHEORG
Defend The Org retweeted
🚨 DTO WEEKLY CHALLENGE, WEEK 5 IS HERE!
A workstation triggered a suspicious process activity alert. Your mission? Hunt for signs of persistence on the host. 🔍
Think you can figure it out?
Head over to @DefendTheOrg and challenge yourself. It’s FREE, so you have no excuse not to give it a try.
Learn by doing. Sharpen your skills.
🚨 DTO WEEKLY CHALLENGE - WEEK 5 🚨
The endpoint detection team noticed that a workstation triggered a low-confidence alert for unusual process activity.
You've been asked to hunt for signs of persistence on the host.
Jump in now - FREE at DefendTheOrg
Incident Response is often about following runbooks.
But in ambiguous cases - it can end up being about determining how you proritize your investigation.
What would you do first here? 🤔

















