SAL2
TryHackMe Security Analyst Level 2 (SAL2)
Threat IntelligenceEnglish
Exam overviewPractice session
During a multi-layered incident investigation, an analyst maps attacker activity to MITRE ATT&CK and finds: T1566.001 (Spearphishing Attachment) → T1204.002 (User Execution: Malicious File) → T1059.001 (PowerShell) → T1003.001 (LSASS Dumping) → T1021.002 (SMB/Windows Admin Shares). What does this kill chain represent?
Loading your practice session…