How would you answer this entry-level SOC Analyst interview question: "Say you were working an incident where reconnaissance was occurring against your network – what would you look for in the network logs to identify and then mitigate the threat?"

Hey y'all, I have an interview for an entry-level SOC analyst position tomorrow morning and I'm going over some of the interview questions I was given by the recruiter. This is the only question that I'm weary about my response on, so I wanted to gauge y'all's opinion on it.

**Say you were working an incident where reconnaissance was occurring against your network – what would you look for in the network logs to identify and then mitigate the threat?** …

analyst cybersecurity entry identify incident interview logs network reconnaissance soc soc analyst threat working