GIAC GCFR Exam Actual Questions

Use Kibana to analyze the Azure AD sign-in logs in the azure-* index. On March 31st, 2021, what is the timestamp of the earliest failed login attempt for the account dcr0ss5pymtechlabs.com?

ViewVM

Show Answer Hide Answer

Access Kibana via http://10.0.1.7:5601 and use the *ws-* index pattern. Use the time range 2021-03-01 00:00 UTC to 2021 04 U 00:00 UTC. How many ec2 DescribMnstantp*; events were performed by the root user?

Show Answer Hide Answer

Using the SOF-ELK instance at 10.0.1.7:5601, inspect the netflow logs related to the ip 5.62.19.62.

Which of the ports seen in the netflow logs associated with the ip 5.62.19.62 has the lowest count?

Hint: Use a wide time frame such as 20 years to ensure all the relevant data is in the scope.

Show Answer Hide Answer

Where are iOS Class keys stored?

Show Answer Hide Answer

Which of the following actions described below would populate the suggestions table on an Android phone?

Show Answer Hide Answer