SIREN

Practice session

A SIREN engineer needs to create a persistent automated detection rule that triggers a network quarantine action whenever a process spawns cmd.exe from a suspicious parent. Which Singularity feature should be used?

Loading your practice session…