Investigate an unusual sign-in alert

Your task: Demo-account incident update

You are exploring Cybersecurity analyst work in a fictional case. Draft an alert note with uncertainty and an owner. Develop one work sample as you investigate. Your writing stays on this page unless you download it.

Supplied fictional records

Demo account CLUB-D: expected workshop login 09:00 on device CLASS-1; alert 09:03 on TEST-7; log entry 09:02 says a supervisor started an approved device test. Classroom policy permits only the supervisor to pause this demo account.

Draft an alert note with uncertainty and an owner.

One case, one work sample

1. Understand your role and task
2. Inspect the supplied records
3. Investigate the case

   Request both supplied checks before deciding. Each response becomes part of this same work sample.

4. Make or revise your decision

   Use the replies to choose the focus of your next draft. Keep the other open responsibilities in your note. You can revise this focus without losing your writing.

5. Complete your work sample

   Your records and investigation are already included. Draft an alert note with uncertainty and an owner. Add your own explanation or next question.

6. Compare and reflect

   Compare your work sample with one possible explanation. You can return to edit your work before finishing. Reflection is about what you noticed, not a score.