Intro to Endpoint Security

Walkthrough summary

Intro to Endpoint Security TryHackMe walkthrough with 6 answered prompts and lab methodology notes.

Sample prompts covered

• What is the normal parent process of services.exe?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the name of the network utility tool introduced in this task?
  Open the walkthrough page to inspect the full answer and command flow.
• Where do the Windows Event logs (.evtx files) typically reside?
  Open the walkthrough page to inspect the full answer and command flow.
• Provide the command used to enter OSQuery CLI.
  Open the walkthrough page to inspect the full answer and command flow.
• What does EDR mean? Provide the answer in lowercase.
  Open the walkthrough page to inspect the full answer and command flow.