Here’s something that bothers me about the MSP industry: we hand technicians the keys to dozens, sometimes hundreds, of Microsoft 365 tenants, and then we expect them to just figure out security on the job. No structured training. No safe place to practice. Just production environments and the hope that nothing goes wrong.
If you’re an MSP owner or manager, think about the last time one of your techs had to investigate a compromised mailbox, trace a phishing attack through audit logs, or figure out why a Conditional Access policy wasn’t working. Did they know exactly what to do? Or did they Google it while you were in the middle of a breach?
That gap between what techs are expected to know and what they’ve actually practiced is the problem Blue Team Labs exists to solve.
Blue Team Labs is a free cybersecurity training platform built specifically for Microsoft 365. Sign up with your Microsoft 365 account or email, create a profile, and start completing challenges immediately.
Every challenge starts with a mission briefing that sets the scene. A realistic scenario based on actual attacks we’ve seen in the field. You’re given evidence that mimics the real Microsoft 365 admin portals: sign-in logs, audit logs, email headers, Conditional Access configs, Intune data, Graph API outputs. The data looks and feels like what you’d see in a real incident because it’s modeled on real incidents.
From there, you work through investigation questions that test whether you can identify what happened, how the attacker got in, what was affected, and how to fix it. No multiple choice slides. No passive videos. You’re doing the investigation.
Challenges range in difficulty from beginner, reading sign-in logs for the first time, to advanced scenarios involving full tenant compromises across identity, email, data, and devices. Whether you’re a Level 1 tech or a senior security engineer, there’s something that’ll push you.
Blue Team Labs is brought to you free by a collaboration between CloudCapsule, Empath, and Cyberdrain.
|
|
|
Every challenge you complete earns you points that accumulate on your profile and the community leaderboard. But it’s not just about completion, it’s about how you do it.
Badges mark your achievements: completing challenge categories, hitting point milestones, finishing streaks. And if you’re the first person to complete a newly released challenge, you earn a First Blood, a permanent marker on your profile that says you got there before anyone else.
For MSP owners and managers, the leaderboard and badge system doubles as a measurable skills benchmark for your team. Instead of hoping your techs know how to respond to an incident, you can see exactly who’s put in the reps and who hasn’t.
Blue Team Labs is completely free. Sign up with your Microsoft 365 account or email, build your profile, and start completing challenges today. Points, badges, and First Bloods are waiting.
And if you want to compete in Season 1, register now, it launched March 15 and were giving away a Switch 2 to the winner!
4 min read
Nick Ross: Apr 13, 2026 9:53:14 AM
Here’s something that bothers me about the MSP industry: we hand technicians the keys to dozens, sometimes hundreds, of Microsoft 365...
6 min read
Nick Ross: Apr 6, 2026 11:28:18 AM
Every lawyer I’ve ever talked to has the same problem.They get staffed on a new case or a new deal, and someone hands them a stack of...
16 min read
Nick Ross: Mar 31, 2026 5:28:29 PM
Microsoft released quite a few high-impact updates this past month, and Nick gives you the streamlined summary to capture just what you...
Nick Ross