Alert Triage
12 practice items · needed by 1 role
Easy 4Medium 5Hard 3
Practice questions
- IOC vs IOAeasy
- False positive or false negative?easy
- Brute force or password spraying?easy
- What a Tier 1 SOC analyst doeseasy
- Failed logons followed by successmedium
- Suspicious process tree in EDRmedium
- Reading the logon typemedium
- Triage an impossible travel alertmedium
- A suspicious scheduled taskmedium
- Why a 99% accurate rule floods the SOChard
- A living-off-the-land downloadhard
- rundll32 with no argumentshard