SOC L1 Alert Reporting

Walkthrough summary

SOC L1 Alert Reporting TryHackMe walkthrough with 10 answered prompts and lab methodology notes.

Sample prompts covered

• What is the process of passing suspicious alerts to an L2 analyst for review?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the process of formally describing alert details and findings?
  Open the walkthrough page to inspect the full answer and command flow.
• According to the SOC dashboard, which user email leaked the sensitive document?
  Open the walkthrough page to inspect the full answer and command flow.
• Looking at the new alerts, who is the "sender" of the suspicious, likely phishing email?
  Open the walkthrough page to inspect the full answer and command flow.
• Using the Five Ws template, what flag did you receive after writing a good report?
  Open the walkthrough page to inspect the full answer and command flow.