Shift Change at the SOC

A roughly three-hour security operations center simulation built on Huntress Labs sandbox data. New students work as Tier 1 analysts and returning students as Tier 2, moving together through triage, investigation, and a hands-on response and containment block.

I identified Huntress as the right platform for this and secured a not-for-resale license for the program. The brief I set was a hands-on, collaborative exercise that students could work through with minimal instructor intervention — new and returning students on the same incident at different tiers, so the returning students carry some of the instruction.

Materials include a facilitator guide, a student packet, and printable card sets.

Materials were built with AI assistance against that brief. The platform selection, the licensing, the tiered design and the classroom implementation are mine.