Question $8$

A large organization's security operations center $($SOC$)$ noticed in its Extended Detection and

Response $($XDR$)$ antivirus software that a phished email gained access to the company

ticketing system, then to the virtual private network $($VPN$)$ software, and lastly, to the

company's file share. What did the SOC find?

Threat actor

Hachtivist

Threat vector

Service disruption

Previous