Module 17: The capstone incident
This module is under construction.
Something is wrong in your lab. Detect it, investigate it, contain it, document it, and present your findings, end to end, in an environment you built from nothing.
And then what?
Finishing here leaves you with a working enterprise and the question every home lab eventually raises: now what?
Drills is the answer. Exercises against the lab you just built, rather than more instructions for building it: attack your own domain and see whether your detections notice, write and tune rules against real techniques, run automation engagements with a defined outcome, and practise finding things that are broken.
That section opens when this course is complete. It is where the lab stops being something you built and starts being something you use.