Sigma Detection Rule Technical Investigation
Research Sigma's official rule format to interpret log sources, detection selections, conditions, field modifiers, statu...
8 questions · 40 minUse CISA's official AA25-212A advisory. Research what the hunt did and did not find, then verify the exact credentials, port, event, and IIS findings.
Sign in to answer the questions, save your result and receive a certificate when you pass.