Cybersecurity Capstone - Incident Response Simulation
The Cybersecurity Professional capstone. Run a full-scale incident response from detection through forensics through executive briefing with real SIEM data plus a full IR-team role-play. Demonstrates mastery of every skill in the path - SOC triage, forensics, communication, and executive storytelling.
View badge details
About This Course
The Cybersecurity Professional capstone. Run a full-scale incident response from Sentinel detection through forensics through executive briefing on the shared opsgilitylabs69 tenant with real Sentinel + full IR team role-play. Demonstrates mastery of the complete skill path.
Course Curriculum
3 Lessons
Beat 1 - Sentinel triage of the live incident - Lab Exercises
Note: This lab pre-provisions an Entra P2 user in the shared opsgilitylabs69 tenant at start — allow up to 5 minutes.
Capstone Beat 1. You are the on-call SOC analyst at Beacon Harbor. An incident just fired in Sentinel. Hunt it to confirmation using real KQL on the opsgilitylabs69 tenant demo Sentinel workspace.
Beats 2-4 - Forensics + Containment + Eradication - Lab Exercises
Note: This lab pre-provisions an Azure Linux VM at start — allow up to 10 minutes.
Capstone Beats 2-4. Memory + disk forensics on Dale's workstation, containment of the compromise, and eradication of attacker persistence. Combines Course 4 forensics skills in a single IR workflow.
Beat 5 - Executive briefing and after-action review - Lab Exercises
Capstone Beat 5. Full IR cycle complete. Present the incident to the Beacon Harbor executive team (CEO, CFO, Board liaison) and run the formal after-action review. The AI agent plays the executive team + IR team members for the AAR.
This course is currently being updated. Check back soon!
This course includes:
- 24/7 AI Instructor Support
- Live Lab Environments
- 2 Hands-on Lessons
- Completion Badge
Earn Your Badge
Complete all lessons to unlock the CYBER-900 Cybersecurity Capstone achievement badge.
CYBER-900 Cybersecurity Capstone
Awarded for completing the Cybersecurity Professional capstone — full IR workflow from Sentinel detection through forensics through executive briefing.
Skills You'll Earn
Complete all lessons in this course to earn this badge