TECHLOOMIX ACADEMY LAB WORKSHEET Track: SOC Analyst Level: Beginner → Tier 1 OBJECTIVE Create a fictional suspicious-login event and build a five-event timeline. Decide whether to close or escalate, then write an analyst note. BEFORE YOU START - Define the expected result. - Record the starting configuration/state. - Identify safety, authorization, cost, or access limits. - Use an isolated lab or approved training environment. LAB PLAN 1. What are you building or testing? 2. What components or tools are involved? 3. What is the expected normal behavior? 4. What failure or challenge will you introduce? 5. Which observations/tests will you use? 6. What evidence will confirm the cause? 7. What action will restore service? 8. How will you validate the result? EVIDENCE Commands / screenshots / logs / diagrams / notes: ____________________________________________________________ ____________________________________________________________ TROUBLESHOOTING NOTES Symptom: Scope: Evidence: Hypothesis: Action: Validation: PORTFOLIO SUMMARY Write 4-6 sentences explaining what you built, what went wrong, how you diagnosed it, how you fixed it, and what you learned. TechLoomix — Learn Tech. Build Skills. Shape Your Future.