Browser LabLD-SOC1-LAB-003Easy
Browser LabLD-SOC1-LAB-003Easy20 min
Reading the Perimeter Log
You have one hour of firewall records from the Nexa Digital perimeter. Nothing has alerted. Your shift lead wants to know whether anything in this window deserves a ticket. Read the evidence and answer precisely.
What you will be able to do
- Determine the direction of a connection from a raw record.
- Distinguish a meaningful destination port from a meaningless source port.
- Identify which single record in a busy log warrants escalation.
Network AnalysisIncident TriageT1021.001 — Remote Services: Remote Desktop Protocol
Sign in to start this lab.
Sign in