Browser LabLD-SOC2-ASSESS-007Hard
Browser LabLD-SOC2-ASSESS-007Hard22 min
Module 7 Assessment — Part B: Diagnose and Tune a Detection
You inherit a noisy detection and a set of complaints. Diagnose its weaknesses, apply the right tuning, make it durable, and decide how to keep it working over time.
What you will be able to do
- Diagnose the metric a noisy rule is failing.
- Tune with an allowlist and target behaviour for durability.
- Choose the maintenance practice that keeps detections effective.
Detection EngineeringSIEM OperationT1059.001 — Command and Scripting Interpreter: PowerShellT1027 — Obfuscated Files or Information
Sign in to start this lab.
Sign in