Writes, tests and tunes detections as code: ATT&CK coverage that survives scrutiny, false-positive economics, log-source fidelity, and alerts an analyst can act on.
Pitches the questions at your level. You can change it any time before you start.
1 of 10 questions match this level from what you can currently practise.
The first question of every role is free to try. Upgrade to practise the full set, with a model answer and per-criterion scoring on every one.