A security team detects a spike in traffic from the company web server. After further investigation, the team
discovered that multiple connections have been established from the server to different IP addresses, but the
web server logs contain both expected traffic and DDoS traffic. Which attribute must the team use to further
filter the logs?
A threat-hunting team makes an EDR query to detect possible C2 outbound communication across all
endpoints. Which level of the Pyramid of Pain is being used?
Which of the following is an important characteristic of an effective threat hunting process?
© Copyrights DumpsEngine 2026. All Rights Reserved
We use cookies to ensure your best experience. So we hope you are happy to receive all cookies on the DumpsEngine.
