SOC Analyst with Wazuh: Detecting and Responding to Attacks
Exit

Lesson 10 of 11 · Responding and investigating

Write an incident report

40 min Debian 12

Objective

Turn an investigation into a clear document, read by management, the technical team and sometimes an authority. You learn the expected sections, severity classification, sharing with TLP, and what you need to know about notifications in Morocco.

This lesson is part of the full course

Unlock SOC Analyst with Wazuh: Detecting and Responding to Attacks to read every lesson, do the exercises, access the simulations and earn your certificate.

Already enrolled? Log in.