Alert-Driven Investigations in SOC

Transition from theory to practice. Learn the step-by-step process of triaging real-world alerts, verifying true positives, and uncovering the root cause of threats.

Brute Force Alert Investigation

Learn how to identify and investigate automated password attacks. Distinguish between a successful breach and a failed attempt by analyzing authentication logs, source IP reputation, and account lockout patterns.

5 Objectives

Enter Room

Suspicious PowerShell Activity Investigation

Dive deep into fileless attack vectors. Learn to decode Base64 encoded commands, identify obfuscation techniques, and use PowerShell Script Block Logging to uncover malicious intent.

5 Objectives

Enter Room

Malware Detection Investigation

Follow the lifecycle of a malware alert from EDR detection to host isolation. Learn to analyze file hashes, check sandbox reports, and determine the "blast radius" of an infection.

5 Objectives

Enter Room

Credential Dumping Investigation

Investigate attempts to steal sensitive identity data. Learn to detect unauthorized access to LSASS, use of tools like Mimikatz, and suspicious registry queries targeting SAM hives.

5 Objectives

Enter Room

Suspicious Account Activity Investigation

Analyze anomalies in user behavior such as "Impossible Travel," suspicious privilege escalations, and first-time access to sensitive resources or administrative shares.

5 Objectives

Enter Room

Phishing Alerts Investigation

Master the art of triaging suspicious emails. Learn to analyze email headers, extract malicious URLs/attachments, and use mail security gateways to hunt for other recipients of the same campaign.

5 Objectives

Enter Room

Alert-Driven Investigations in SOC

Brute Force Alert Investigation

Suspicious PowerShell Activity Investigation

Malware Detection Investigation

Credential Dumping Investigation

Suspicious Account Activity Investigation

Phishing Alerts Investigation

CYBRIXEN Assistant

Welcome to CYBRIXEN Assistant

Contact Support Team