At start usually tell me about yourself. 1 - what is SLA of your organization ?. 2 - explain email phishing analysis ?. 3 - In phishing analysis, what is sandboxing, sandbox current version ? 4 - which tool you are using for ticketing ? 5 - And many splunk, siem related questions.

Question

Accepted Answer

1Q - service level agreement, most of the companies usinng P 1 - 30MIN P 2 - 1 HOUR P 3 - 2 HOUR P 4 - 4HOUR
2Q - sender, subject, spell mistakes, body, header analysis, spf, dkim, dmarc.
3Q - swift version 5
4Q - service now

At start usually tell me about yourself. 1 - what is SLA of your organization ?. 2 - explain email phishing analysis ?. 3 - In phishing analysis, what is sandboxing, sandbox current version ? 4 - which tool you are using for ticketing ? 5 - And many splunk, siem related questions.

Popular interview questions of Soc Analyst 1