Skip to main content

Preview build: sign-in and grading run on the server. MFA is not enabled, and storage is in server memory so it does not survive a restart.

LearnDefend
Browser LabLD-SOC2-ASSESS-005Hard
Browser LabLD-SOC2-ASSESS-005Hard22 min

Module 5 Assessment — Part B: Triage and Decide

A fresh sample detonated from HR-WS-14. You have its synthetic detonation report and the host context. Read the behaviour, extract the indicator to scope with, classify it, and decide the response.

What you will be able to do

  • Classify the sample's capability from its behaviour.
  • Extract the durable IOC to scope the estate.
  • Map the impact technique and choose the response.
IOC AnalysisIncident TriageT1486Data Encrypted for ImpactT1071.001Application Layer Protocol: Web Protocols

Sign in to start this lab.

Sign in