~/offsec-osda · Phase 2 ▊
OFFSEC · objective · 10% of the exam
Phase 2 — OffSec Defense Analyst
The official OFFSEC documentation our Phase 2 practice questions are cited to. Review the primary sources, then practise.
Official references for this objective
-
Offsec — OSDA Exam Guide – OffSec Support Portal
You may create or import any detection rules in ELK.
-
Offsec — OSDA Exam Guide – OffSec Support Portal
Each phase can award partial or full points depending on the level of completion.
-
Offsec — OSDA Exam FAQ – OffSec Support Portal
Points are given by locating and documenting attacker actions as found by using the SIEM.
-
Offsec — SOC-200 Offline Video Mapping – OffSec Support Portal
Phase Two: Lateral Movement to Application Server 16.2. Phase Two: Lateral Movement to Application Server SIEM02_02_00 18.2.1. Brute Force and Authentication to appsrv01