Problem
Spotify data breach on December 9th, 2020. You are assuming the role of a SOC analyst in the data center at the organization of your choosing. Currently, it is "all systems go" and "green light" status throughout the network. Then suddenly, you get an alert of some sort indicating a vulnerability scan is taking place.
i. What is the alert that is coming in and from what device(s), tool(s), or software? What is it indicating?
ii. What actions will you take and what tools will you use to determine if the alert is real or a false alarm?
iii. What tool(s) are you using from chapters 2 through 5 in your process?
iv. What framework(s) are you using from chapters 2 through 5 in your process?
v. What data are you collecting during your initial stages, where are you recording it, and why?