Tier 1 SOC

Phishing Triage Lab

Drop into an inbox of 30 simulated emails. Identify the malicious ones, document the indicators, and escalate the right ones. Your score is graded against a SOC playbook covering phishing, BEC, invoice fraud, and malware delivery.

Inbox size30
Malicious emails10
Benign emails20
Pass mark75%

Inbox

Classify each message, pick a severity, decide whether to escalate, and note the indicators that led you there.

SOC playbook

  • Escalate all credential harvesting, BEC, invoice fraud, and malware delivery events.
  • Severity should match likely impact. Malware and executive fraud should trend critical.
  • Document concrete indicators, not vibes. Domains, attachments, urgency, spoofing, credential lures, and execution steps matter.
  • Benign emails should not be escalated just because they mention cloud brands or normal workflow tools.

Scoring

  • 50% classification accuracy
  • 20% escalation accuracy
  • 15% severity accuracy
  • 15% indicator quality

If a host website callback is configured, this lab will POST pass/fail and score after grading.

Phishing Triage Lab, SOC Tier 1 simulation.