cybersecurity / soc analyst

    EDR Hunting: CrowdStrike Falcon

    Module Progress
    8 / 10

    Initialize Transmission

    4K Cinematic Stream Ready

    Mission Intelligence

    Hunt threats using EDR process trees and telemetry.

    Operational Objectives

    • 01Query process tree for 'cmd.exe'.
    • 02Isolate compromised host.
    • 03Pull memory dump via RTR.
    • 04Identify parent-child anomalies.
    • 05Check for credential dumping.
    Secure Workstation Instance
    SYSTEM BOOT: SUCCESSFUL
    ENCRYPTION: AES-256-GCM ACTIVE
    USER: root@iset-sandbox
    Welcome to the iSET+ interactive terminal.
    Type 'help' to see available commands.
    ➜~
    ➜~