easy5 pts · first answer countsalert-triagedetection-engineering
False positive or false negative?
A real attacker ran a credential dumping tool on a server, but no alert fired. What kind of detection failure is this?
Discussion 0
Join free to post in the discussion.
Related questions
- IOC vs IOACybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- What a Tier 1 SOC analyst doesCybersecurity Analyst
- Failed logons followed by successCybersecurity Analyst
- Suspicious process tree in EDRCybersecurity Analyst
- Reading the logon typeCybersecurity Analyst
- Triage an impossible travel alertCybersecurity Analyst
- A suspicious scheduled taskCybersecurity Analyst