Incident Containment and Threat Eradication

Medium CompTIA CySA+ CS0-003 cybersecurity drill: Your SIEM alerted on suspicious PowerShell activity from workstation WS-FINANCE-07. Initial triage