CCDL2

Practice session

In a SOC environment, a Tier 1 analyst receives an alert for a suspicious outbound connection on port 443 to an unknown IP. After verifying the IP is flagged as malicious in threat intelligence feeds, what is the MOST appropriate immediate next step?

Loading your practice session…