Incident Response | Classroom

TryHackMe Conti: ProxyShell to Ransomware in Splunk

SOC Level 2

Conti: ProxyShell to Ransomware in Splunk

TryHackMe Servidae: Tracing a Compromised Workstation in ELK

SOC Level 2

Servidae: Tracing a Compromised Workstation in ELK

TryHackMe Response and Recovery: Containing an M365 Compromise From the Audit Log

SOC Level 2

Response and Recovery: Containing an M365 Compromise From the Audit Log

TryHackMe Post-Incident Activity: Turning an Incident Into Detection Rules

SOC Level 2

Post-Incident Activity: Turning an Incident Into Detection Rules

TryHackMe Detection and Analysis: Scoping a Nexus Financial Account Compromise

SOC Level 2

Detection and Analysis: Scoping a Nexus Financial Account Compromise

TryHackMe SOC L2 Alert Triage: The Senior Workflow

SOC Level 2

SOC L2 Alert Triage: The Senior Workflow

TryHackMe Threat Intel & Containment: Buying Time on the Adversary

SOC Level 2

Threat Intel & Containment: Buying Time on the Adversary

TryHackMe Identification & Scoping: Working a Phishing Incident

SOC Level 2

Identification & Scoping: Working a Phishing Incident

TryHackMe Preparation: The First Phase of Incident Response

SOC Level 2

Preparation: The First Phase of Incident Response