CYBERSECURITY PATHWAY01 / 03
Think like an analyst.
Follow an alert from the first clue to an evidence-based decision. Learn what to inspect, what to question and what to record.
1Receive an alert2Investigate3Report findings
INVESTIGATION NOTEBOOKEXAMPLE
# Start by understanding the evidence analyst@quarry:~$ tshark -r evidence.pcap -q -z conv,ip Observe → verify → explain
Packet analysis · Log triage · Detection