Browser LabLD-SOC2-ASSESS-001Hard
Browser LabLD-SOC2-ASSESS-001Hard22 min
Module 1 Assessment — Part B: Correlate and Decide
A fresh case, no Tier-1 notes. Three sources cover one window on a database server. Correlate them, judge whether the order is even possible, and decide.
What you will be able to do
- Identify the pivot host across the three sources.
- Detect a clock offset and judge whether the sequence is possible.
- Map the exfiltration and decide the response.
Log AnalysisSIEM OperationT1048 — Exfiltration Over Alternative Protocol
Sign in to start this lab.
Sign in