Task 1
What happened?
A good triage note answers who, what, when, where, and why it matters. Start with the username, source IP, and outcome.
What five-letter word describes a security event that needs triage?
TEXT ยท 15 XP
SOC Level 1
First Alert Triage
Investigate a fake suspicious login alert and decide what to do next.
0%
progress
BEGINNERINVESTIGATION150 XP
Lab
This room does not need a machine.