RedTeam Nexus Labs
Back to SOC & Blue Team
Module 10 // SOC & Blue Team

Authentication Anomalies

Practice: Identify anomalies in supplied logs. Assessment: Authentication-alert quiz. Lab: Investigate a fictional account takeover.

Intermediate55 min
WHAT THIS MODULE COVERS
  1. 01

    Failed logins

  2. 02

    impossible travel concepts

  3. 03

    unusual devices

  4. 04

    MFA events

  5. 05

    account compromise indicators

MODULE QUIZ

Loading quiz…