Cyber defense investigation
Using synthetic network and host logs, build an incident timeline, identify suspicious activity and explain which additional evidence would confirm or weaken your hypothesis.
The Level 1 role requires correlating data from multiple sources to identify anomalies and indicators of compromise.
Source posting