PCCET Web TestEngine demo

Immediately disable the suspicious user until they conclude their investigation.

Look for other types of suspicious activity in the moments before or after the login.

Inspect the network firewall for any open ports and include those in their investigation.

Review who else was logged in at the same time and inspect all active user accounts.