~/giac-geir · Cloud Response and Analysis ▊
← GIAC Enterprise Incident Response
GIAC · objective · 10% of the exam
Cloud Response and Analysis
Exam objectives are the official skill domains GIAC Enterprise Incident Response tests. Below are the official GIAC docs our questions on this objective cite — review them, then practise.
Sign in to track your progress on this objective.
Official references for this objective
-
Sans — FOR608: Enterprise-Class Incident Response & Threat Hunting | SANS Institute
we look for suspicious user logon and email activity from the Unified Audit Logs (UAL) as a common method for detection