SIEM TryHackMe rooms¶ Beginner-friendly virtual labs where you learn SIEM tools through hands-on investigations, featuring rooms like ‘Splunk Basics’ and ‘SOC Level 1’ that simulate real security operations centre workflows. How?¶ VPN logs ItsyBitsy Investigating with Splunk Benign CaddyWiper and APT37 Zerologon