ForenShield Lab
Practice real reflexes, with no real risk
Six simulations to run in your browser: handle an attack, read a timeline, unmask an e-mail, follow a lead, prioritize flaws, hold an analyst seat.
- Free, no account
- Entirely fictional data
- Score and explained answers
Your progress
00/6
0 of 6 modules completed
Your progress stays in this browser, with no account.
Six modules
Choose your first exercise
Each module stands alone, in the order of your choice.
- ≈ 15 min
Incident Lab
Attack simulation
A fictional company is under attack. Find the entry point, contain, rebuild the facts, then get your report.
Not tried yet - ≈ 12 min
Forensic Lab
Timeline analysis
Walk through the timeline of a fictional machine: processes, network, files and Windows events. Spot the anomalies.
Not tried yet - ≈ 12 min
Phishing Lab
Phishing detection
Investigate fictional e-mails: sender, headers, SPF, DKIM, DMARC and indicators. Malicious or legitimate?
Not tried yet - ≈ 12 min
OSINT Lab
Digital investigation
Investigate a fictional domain: DNS, subdomains, technologies. Each finding unlocks a lead and enriches your graph.
Not tried yet - ≈ 10 min
CVE Lab
Vulnerability management
Compare fictional vulnerabilities (CVSS, EPSS, KEV), adjust your context with sliders and build a remediation plan.
Not tried yet - ≈ 15 min
SOC Lab
Alert analysis
Take your analyst seat: a queue of fictional alerts, Windows events to correlate, escalation decisions to own.
Not tried yet
What the lab is not
Demonstrations, not analyses
Made-up data
The companies, domains, addresses and logs are written for the exercise. Domains and addresses use ranges reserved for documentation.
No real analysis
The lab reads nothing from your machine, queries no service and sends no data. It replaces neither an investigation nor an audit.
Real tools next door
For your own data, use the toolbox or ForenShield Client, designed for that purpose.
Before you start
Frequently asked questions
Is the lab free?
Yes, with no account. Your progress is stored only in your browser.
Who is it for?
For people discovering security operations as well as those who want to revise, alone or as a team. Every answer is explained.
Can I use it in training?
Yes, as an exercise or discussion aid. It does not replace a supervised crisis exercise or a training course. The site also presents cybersecurity training.