# KK Cyber - Practice worksheet

Use the synthetic lesson dataset and your own authorised lab only.

## 1. Observe
- Count all rows, failures and successes.
- List repeated failures by sample user.
- State what you know separately from what you assume.

## 2. Change a rule
- Run the sample with review thresholds 2, 3 and 4.
- Record which sample users are flagged.
- Explain why a flag is not proof of an attack.

## 3. Review a workflow
- Choose a recipe in the AI-agent workflow builder.
- Identify its source and allowed action.
- Run the sample, inspect its draft and approve it for local export.
- Change the input and verify that approval must be given again.

## 4. Keep evidence
- Save the Python file, output and a short explanation.
- Label simulations and actual runs clearly.
- Do not include passwords, secret keys or private customer records.

Course schedule, lab access and enrolment terms are confirmed with KK Cyber.