EVTX Lab
Load and explore Windows Event Log files in the browser with Rust WASM parsing.
Open labHands-on labs
Labs
Interactive exercises in the browser, plus PowerShell steps to run on a real Windows machine. Each lab links back to topics in the explore tree.
ACL & SDDL Lab
Paste SDDL or pick samples, then see owner, DACL, SACL, and ACE meaning in plain language.
Open labAccess check simulator
Step through a simplified DACL vs token decision — same rules as the real algorithm, fewer edge cases.
Open labDNS resolution lab
Resolve names from the browser (DNS-over-HTTPS) and compare with how the Windows DNS client behaves.
Open labProcess tree explorer
Walk a sample parent/child tree from System to Explorer and a user app.
Open labMemory metrics lab
Compare private bytes, working set, and commit with realistic scenarios.
Open lab