Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Investigation Scenario 🔎

Investigation Scenario 🔎

Scheduled Pinned Locked Moved Uncategorized
investigationpadfirsoc
2 Posts 1 Posters 2 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • chrissanders88@infosec.exchangeC This user is from outside of this forum
    chrissanders88@infosec.exchangeC This user is from outside of this forum
    chrissanders88@infosec.exchange
    wrote last edited by
    #1

    Investigation Scenario 🔎

    A host on your network executed the command “netsh wlan show profile” for the first time.

    What do you look for to investigate whether an incident occurred?

    #InvestigationPath #DFIR #SOC

    chrissanders88@infosec.exchangeC 1 Reply Last reply
    1
    0
    • chrissanders88@infosec.exchangeC chrissanders88@infosec.exchange

      Investigation Scenario 🔎

      A host on your network executed the command “netsh wlan show profile” for the first time.

      What do you look for to investigate whether an incident occurred?

      #InvestigationPath #DFIR #SOC

      chrissanders88@infosec.exchangeC This user is from outside of this forum
      chrissanders88@infosec.exchangeC This user is from outside of this forum
      chrissanders88@infosec.exchange
      wrote last edited by
      #2

      I post these scenarios every Tuesday! We're up to 135 of them so far! If you enjoy them, you'll probably like my Investigation Theory class where I work with folks directly on improving their investigative skills leverage principles from cognitive science: https://www.networkdefense.co/courses/

      1 Reply Last reply
      1
      0
      • R relay@relay.infosec.exchange shared this topic
      Reply
      • Reply as topic
      Log in to reply
      • Oldest to Newest
      • Newest to Oldest
      • Most Votes


      • Login

      • Login or register to search.
      • First post
        Last post
      0
      • Categories
      • Recent
      • Tags
      • Popular
      • World
      • Users
      • Groups