▲ 3 r/tryhackme
Hello everyone, for the SOC SIM report, should I write a paragraph or a sentence that includes the 5 Ws or should I fill in the fields provided. See fields below.
TRUE POSITIVE
Time of activity:
List of Affected Entities:
Reason for Classifying as True Positive:
Reason for Escalating the Alert:
Recommended Remediation Actions:
List of Attack Indicators:
u/Big-Surprise-8164 — 13 days ago