ConceptsNetwork Alerts
Network Alerts
SOC alerts generated from network-level signals, IDS/IPS hits, suspicious connections, DNS anomalies, that analysts triage to find network-based attacks like command-and-control, scanning, and exfiltration.
8 direct links1 lesson
Concept Neighborhood
Related · bigger circles cover more lessons
Start here
Triage Methodology
The most substantial related concept here, covered by 7 lessons.
Relatedsorted by lesson coverage
Triage MethodologyStart here
7
lessons
Flow Data
6
lessons
LOLBin Hunting Methodology
6
lessons
Network Telemetry
6
lessons
Outlier Detection
5
lessons
Beacons
1
lesson
Show 2 more connections
Related Lessons
1 lesson covers this conceptSign in to open lesson content directly.