SAL1
TryHackMe Security Analyst Level 1 (SAL1)
Alert TriageEnglish
Exam overviewPractice session
A SOC analyst receives an alert classified as 'High' severity in the SIEM. The alert was triggered by a single failed login attempt from an internal IP address. What is the most appropriate first action?
Loading your practice session…