Gamified Investigation Labs for Incident Response and Threat Hunting

Blue Team Labs Online is a hands-on practice platform for defensive security practitioners, operated by Security Blue Team, a UK training company that also publishes blue team certifications and runs the CySec Careers job board. The platform is aimed at people who already work with security tools and investigations rather than at newcomers, and it is used both by individuals keeping their skills current and by teams that want a shared benchmark of investigative ability across analysts.

Content comes in two forms. Challenges are downloadable artifacts such as memory dumps, phishing emails, packet captures, and log sets that users analyze with their own tooling. Labs are full investigations delivered through an in-browser client, so no local virtual machine or VPN setup is required, and the user works a scenario to establish what a malicious actor did. Each exercise carries a difficulty rating and awards points, feeding global and country-specific rankings.

The free tier covers the downloadable challenges. A PRO subscription unlocks the full investigation library, listed at 269 labs, priced monthly, quarterly, half-yearly, or annually with progressively larger discounts and cancellable at any time. Tools exercised across the catalogue include Volatility, Wireshark, and Ghidra, which places the platform closer to practical SOC and DFIR workbench experience than to lecture-style coursework, and its scoring makes progress legible to a hiring manager or team lead.