Identifying Threat Actor Infrastructure and TTPs

Hard Security+ cybersecurity drill: Your organization's SIEM has flagged unusual outbound traffic patterns from multiple workstations in the accounting