SOC Analyst – Phishing Email Investigation

Microsoft 365 Credential Harvest

Identify the credential harvesting workflow in a fake login lure.

intermediate30 min40 pts

Instructions

Review the scenario
Read the scenario summary and note the primary investigation goal.
Inspect the provided artifact or environment
Use the artifact downloads or the live container session to gather evidence.
Answer the guided questions
Submit answers and the final flag before time expires.