Builds an isolated virtual lab with snapshots, test networks, intentionally vulnerable targets, safe sample handling, and rules that prevent exercises from harming real systems.