Never walk into a SANS exam with an untested index. SANS provides two practice exams with your course registration; use them specifically to stress-test your documentation.
The Cyber Kill Chain, MITRE ATT&CK mapping, memory acquisition steps, and the order of volatility. Sans For508 Index
: A personalized index allows you to add more detail to areas where you feel less confident. A Step-by-Step Methodology for Building Your Index Never walk into a SANS exam with an untested index