Investigation labs

Work the evidence, then explain what it proves.

Amniora labs are generated practice investigations with synthetic artefacts, scoped learner tasks and support that stays inside the supplied case material.

Create account View features

Lab structure

A lab gives you a case brief, evidence and tasks.

Each investigation asks you to read the supplied material and write evidence-backed findings.

Incident brief

Linux service disruption during a declared investigation window.

Evidence classes

Authentication logs, service history, policy notes and exported artefacts.

Investigation task

Only the evidence listed on each task should be used for that answer.

Learner output

A finding, what the evidence cannot prove and evidence-supported next steps.

Review result

Saved lab review, feedback and exportable PDF/evidence ZIP.

Evidence scope

Use the right evidence for each claim

A file can support one kind of claim and not another. Account records, logs, approvals and exports each have different uses.

Identity

auth.log

Who acted, and how confidently the evidence supports that actor.

Activity

service and process history

What changed over time, separated from current state.

Authority

change request and ticket

Whether the observed activity matches a scoped approval window.

Output

PDF and evidence ZIP

A stable learner-facing package for review.

Difficulty

Difficulty changes the investigation work

Every difficulty keeps the same habit: make claims only from the evidence listed for the task. Higher difficulty asks for more correlation and clearer uncertainty.

Beginner

Focused evidence

One clear output

30 min

Intermediate

Correlation

Evidence gaps and policy comparison

30 min

Advanced

Multi-source analysis

Uncertainty and remediation depth

60 min

Guidance

Guidance helps without taking over

Hints and task support point learners toward useful evidence while leaving the finding to the learner.

Explain

Clarifies what the current task is asking for before the learner answers.

Hint

Points to the next analytical step without naming the finding.

Command

Provides safe command context when a task involves terminal evidence.

Quiz

Checks understanding with a question tied to the current case.

Availability

Linux is the active public lab category

Additional investigation environments may be introduced as Amniora develops. No availability date is implied.

Current focus

Linux investigations currently include system activity, account behaviour, policy evidence and review tasks for private beta learners.

Access varies by plan

Difficulty and duration availability are reflected on the pricing page and inside the authenticated product.

Start with a focused investigation.

Create an account to generate labs within the current private beta access limits.

Create account Compare access