Practice cases
Work through a fictional case, then compare your reasoning with the answer. Each case explains what the clues show, what they don't, and a safe next step.
Practice case · Fictional
Check a suspicious email
Inspect a fictional password-expiry email, identify the useful evidence, and choose a safe next step.
Practice case · Fictional
Review an unfamiliar sign-in
Compare two timestamps and decide what an unfamiliar sign-in location can tell you.
Practice case · Fictional
Compare account signals
Compare fictional signals, decide what the clues do—and don’t—tell you, and identify the evidence that is still missing.