Browser LabLD-SOC2-LAB-010Hard
Browser LabLD-SOC2-LAB-010Hard22 min
Run One Case Through the Whole Workflow
A single alert lands on a busy shift: an unusual process on FIN-WS-12, one event, no rule matched the full pattern. Take it through the integrated SOC workflow — correlate, hunt, respond, and close the loop — while a full queue waits behind it.
What you will be able to do
- Move a single case through correlation, hunting and response.
- Close the loop by feeding the outcome into a detection.
- Prioritise the surrounding queue by risk.
SIEM OperationIncident TriageT1218.005 — System Binary Proxy Execution: MshtaT1071.001 — Application Layer Protocol: Web Protocols
Sign in to start this lab.
Sign in