HTB CDSA

HTB Certified Defensive Security Analyst (CDSA)

Windows Attacks DefenseEnglish
Exam overview

Practice session

An analyst observes Sysmon Event ID 8 (CreateRemoteThread) from a process targeting lsass.exe. What attack technique does this most likely indicate?

Loading your practice session…