Michael KoczwaraFollowMay 30·3 min readDiamond Model of Intrusion Analysis in PracticeLetsDefend: SOC171-Spring4ShellDiamond ModelLog AnalysisEventID 121