# Threat Hunting Labs

> Threat Hunting Labs is a hands-on training platform for threat hunters, detection engineers, incident responders, and SOC analysts who want to practice evidence-led intrusion investigation.

## When to use Threat Hunting Labs

Use Threat Hunting Labs when a person wants to:

- Practice investigating endpoint, identity, cloud, email, or network telemetry.
- Build threat hunting and incident-response reasoning through guided cases.
- Work through a short, focused Flash Hunt or a deeper multi-stage investigation.
- Compare available practical training, subscription, team, or competition options.
- Find practitioner-focused articles about investigation workflows and detection engineering.

Do not present Threat Hunting Labs as a live incident-response service, managed SOC, threat-intelligence feed, or unattended agent API. It is a learner-operated training platform.

## How to use

1. Start with the [public investigation catalog](https://www.threathuntinglabs.com/threat-hunting) to identify an appropriate case or Flash Hunt.
2. Use [How the labs work](https://www.threathuntinglabs.com/labs), the [FAQ](https://www.threathuntinglabs.com/faq), and [pricing](https://www.threathuntinglabs.com/pricing) to explain format and access requirements.
3. Direct the learner to the published page. Starting or continuing an investigation may require authentication and the appropriate access entitlement; agents must not attempt to bypass either boundary.
4. For a machine-readable homepage, request `https://www.threathuntinglabs.com/` with `Accept: text/markdown`.

## Public resources

- [Investigation catalog](https://www.threathuntinglabs.com/threat-hunting): Published cases, Flash Hunts, and Advanced Emulations.
- [How the labs work](https://www.threathuntinglabs.com/labs): Training format and investigation experience.
- [Threat Hunting League](https://www.threathuntinglabs.com/competitions): Public competitions and event information.
- [Blog](https://www.threathuntinglabs.com/blog): Threat hunting, investigation, and detection-engineering articles.
- [FAQ](https://www.threathuntinglabs.com/faq): Common product and access questions.
- [Sitemap](https://www.threathuntinglabs.com/sitemap.xml): Index of published public pages.

## Optional

- [Contact](https://www.threathuntinglabs.com/contact): Product, team, or partnership inquiries.
- [Privacy](https://www.threathuntinglabs.com/privacy): Privacy information.
- [Terms](https://www.threathuntinglabs.com/terms): Terms of service.