ConceptsIndicator Pivoting
Indicator Pivoting
An analyst investigation skill of moving from one indicator to related ones, an IP to the domains it hosts, a hash to where else it appears, to expand an investigation and uncover the full scope of activity.
8 direct links3 lessons
Concept Neighborhood
Prerequisite · arrow shows the orderRelated · bigger circles cover more lessons
Start here
Indicators of Compromise
The most substantial related concept here, covered by 8 lessons.
Builds towardIndicator Pivoting is a foundation for these
Relatedsorted by lesson coverage
Indicators of CompromiseStart here
8
lessons
Behavioral Pivoting
3
lessons
Cross-Source Correlation
3
lessons
Investigation
3
lessons
Pivoting
3
lessons
Indicator Pivot
1
lesson
Show 1 more connection
Related Lessons
3 lessons cover this conceptThe SOC Analyst Role in Depth
SOC Analyst
A Structured Methodology for Alert Triage
SOC Analyst
Investigation Deep Dive: Pivoting Through Telemetry
SOC Analyst
Sign in to open lesson content directly.