Getting started

What is Invictus Academy?

Invictus Academy is a cloud-native cyber range for incident-response and forensics training. Where most SOC and IR teams were trained on on-premises Windows and Active Directory, the Academy puts you in the environments adversaries actually target today: Microsoft Entra ID, Microsoft 365, and cloud workloads on Azure and AWS.

You practise on realistic, pre-staged incidents - detecting, investigating, and documenting them - and your detection and response times are measured so you can see your progress over a programme.

Signing in

Access uses single sign-on, so a single login covers the whole platform: your labs, scoring, cases and KPIs. You sign in with the account your organisation set up for you, on an invitation sent to your work address.

Not built. Connecting your own identity provider, so staff sign in with their existing corporate account, is not available yet. Every account today is created by invitation.

Finding your way around

The left sidebar is your primary navigation. The main sections are:

• Dashboard - your at-a-glance view of activity and progress.
• Labs - the catalogue of incidents you can run.
• Runs - the labs you have started, in progress and finished.
• Cases - your investigations, timelines, and evidence.
• KPIs - your detection and response metrics over time.
• Admin - organisation and platform administration (for admins).

Search and contextual help

Press ⌘K (Ctrl+K on Windows and Linux) anywhere to open the command palette. From there you can jump to any section, open a documentation page, or run a quick action such as switching the theme. It is the fastest way to move around and to find help without leaving what you were doing.