SOC Workbooks and Lookups

Walkthrough summary

SOC Workbooks and Lookups TryHackMe walkthrough with 12 answered prompts and lab methodology notes.

Sample prompts covered

• Looking at the identity inventory, what is the role of R.Lund at the company?
  Open the walkthrough page to inspect the full answer and command flow.
• Checking the asset inventory, what data does the HQ-FINFS-02 server store?
  Open the walkthrough page to inspect the full answer and command flow.
• Finally, does the file sharing from the scenario look legitimate and expected? (Yea/Nay)
  Open the walkthrough page to inspect the full answer and command flow.
• According to the network diagram, which service is exposed on the TCP/10443 port?
  Open the walkthrough page to inspect the full answer and command flow.
• Now, which subnet would the server behind 172.16.15.99 IP belong to?
  Open the walkthrough page to inspect the full answer and command flow.