Browser LabLD-SOC2-ASSESS-008Hard
Browser LabLD-SOC2-ASSESS-008Hard22 min
Module 8 Assessment — Part B: Run an Anomaly Hunt to Its Close
You have a baseline of how the finance team's accounts normally authenticate. Intelligence suggests credential misuse. Hunt for the account or host that deviates from its peers, then close the loop.
What you will be able to do
- Choose the hunt type suited to a baseline.
- Identify the host that deviates from its peers.
- Escalate a live finding and close the loop into a detection.
Threat HuntingDetection EngineeringT1021.001 — Remote Services: Remote Desktop ProtocolT1078 — Valid Accounts
Sign in to start this lab.
Sign in