Browser LabLD-SOC2-ASSESS-004Hard
Browser LabLD-SOC2-ASSESS-004Hard22 min
Module 4 Assessment — Part B: Trace the Traffic and Decide
A fresh network case on host SRV-DB-04. You have its outbound flows, the destination context, and the host's data-access role. Read the traffic, rule out the benign twin, and decide the response.
What you will be able to do
- Identify the exfiltration destination from the outbound flows.
- Rule out a benign backup as the explanation.
- Map the technique and choose the containing response.
Network AnalysisLog AnalysisT1048 — Exfiltration Over Alternative ProtocolT1071.001 — Application Layer Protocol: Web Protocols
Sign in to start this lab.
Sign in