SOC › Module 2 › Lesson 5
Quiz — Hunting Basics
10 APPLY items on hunt methodology, hypotheses, and hunt loop on $HUNT_LAB.
Opening
Threat Hunting Basics — Module Quiz
Ten APPLY items. Name hunting concepts on YOUR $HUNT_LAB sample telemetry — never stranger SIEM access, live hunt exports, or offensive playbooks. Original Cyberlium. Next: ATT&CK Mapping.
Knowledge Check
APPLY: Hunt methodology includes:
Multiple choice
Knowledge Check
APPLY: True or False: A good hypothesis is testable and tied to a data source.
True or False
Knowledge Check
APPLY: Hunt loop ends with:
Multiple choice
Knowledge Check
APPLY: Tutorial runs credential dump on live AD — you:
Multiple choice
Knowledge Check
APPLY: Refuted hypothesis value:
Multiple choice
Knowledge Check
APPLY: Cyberlium NEVER allows:
Multiple choice
Knowledge Check
APPLY: Before hunting you should:
Multiple choice
Knowledge Check
APPLY: True or False: Hunt documentation feeds detection tuning feedback.
True or False
Knowledge Check
APPLY: chmod 600 on hunt notes means:
Multiple choice
Knowledge Check
APPLY: Next lesson after this quiz:
Multiple choice
Answer all 10 knowledge checks to continue. (0/10 answered)