1. Was given a curl command with a valid Shodan URL. Was asked to write a code/pseudocode. 2. How would you enrich an alert using just the above URL? 3. Do you see any problem with the code? 4. If the code fails, how would you diagnose it? 5. How will you handle the maximum get requests cap for Shodan license? 6. If an analyst gets multiple alerts with different URLs, what approach would you take to make sure the enrichment is efficient, quick and doesn't impact performance?
Check out your Company Bowl for anonymous work chats.