Browser LabLD-SOC2-ASSESS-003Hard
Browser LabLD-SOC2-ASSESS-003Hard22 min
Module 3 Assessment — Part B: Read the Host and Decide
A fresh host case. You have process telemetry, a persistence entry and a logon record for SRV-APP-05. Read the ancestry, triage the persistence, and decide the response.
What you will be able to do
- Identify the malicious process and its parent from the ancestry.
- Name the persistence surface the attacker used.
- Choose the response that preserves evidence.
Windows SecurityLog AnalysisT1547.001 — Boot or Logon Autostart Execution: Registry Run KeysT1059.005 — Command and Scripting Interpreter: Visual Basic
Sign in to start this lab.
Sign in