PPS CLASS · PROJECT 2 OF 10 · Beginner

Alert Triage & Shift Monitoring

Watch a live SIEM/EDR queue, do the first-pass read on each alert, and decide what actually needs escalation.

Tools For This Project

SplunkEDRTicketing

Prerequisites

Coming soon. What you need in place before starting this project (lab state, accounts, prior projects completed) goes here.

Step-by-Step Walkthrough

Coming soon. The full walkthrough, with written steps and screenshots, is being built and filmed as part of the PPS Class. Follow along on AliTere's socials to catch it as it drops.

Notes & Tips

Coming soon. Things to pay attention to while working through this project.

Troubleshooting

Coming soon. Real problems hit while building this project, and how they got fixed.
← Home SOC Lab Build Phishing Mail Investigation →