Quiz — Hunting Basics
10 APPLY items on hunt methodology, hypotheses, and hunt loop on $HUNT_LAB.
Threat Hunting Basics — Module Quiz
Ten APPLY items. Name hunting concepts on YOUR $HUNT_LAB sample telemetry — never stranger SIEM access, live hunt exports, or offensive playbooks. Original Cyberlium. Next: ATT&CK Mapping.
APPLY: Hunt methodology includes:
APPLY: True or False: A good hypothesis is testable and tied to a data source.
APPLY: Hunt loop ends with:
APPLY: Tutorial runs credential dump on live AD — you:
APPLY: Refuted hypothesis value:
APPLY: Cyberlium NEVER allows:
APPLY: Before hunting you should:
APPLY: True or False: Hunt documentation feeds detection tuning feedback.
APPLY: chmod 600 on hunt notes means:
APPLY: Next lesson after this quiz: