Each level builds on the previous. Complete the labs, then answer the debrief quiz.
Core ES|QL syntax, filtering, aggregation. Start here.
LOOKUP JOIN, enrichment, threat intel, multi-stream queries.
CHANGE_POINT, FORK, risk scoring, SOC dashboards.
| Lab | Title | Score |
|---|
Enter your class code to browse the course material.
— or —
Enter your details to get started.
Already registered?