SOC L1 Alert Triage

Walkthrough summary

SOC L1 Alert Triage TryHackMe walkthrough with 11 answered prompts and lab methodology notes.

Sample prompts covered

• What is the number of alerts you see in the SOC dashboard?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the name of the most recent alert you see?
  Open the walkthrough page to inspect the full answer and command flow.
• What was the verdict for the "Unusual VPN Login Location" alert?
  Open the walkthrough page to inspect the full answer and command flow.
• What user was mentioned in the "Unusual VPN Login Location" alert?
  Open the walkthrough page to inspect the full answer and command flow.
• Should you first prioritise medium over low severity alerts? (Yea/Nay)
  Open the walkthrough page to inspect the full answer and command flow.