SOC Alert Analysis: APT35 HyperScrape Data Exfiltration Tool Detected
Explore APT35’s HyperScrape detection & defense strategies in our deep dive into combating sophisticated cyber threats with LetsDefend
SOC Alert Analysis: RCE Detected in Splunk Enterprise
Discover insights on combating Remote Code Execution threats and a recent Splunk Enterprise vulnerability.
SOC Alert Analysis: Quishing Detected (QR Code Phishing)
Explore my analysis of a Quishing incident, highlighting early detection, response strategies, and lessons learned to fortify against QR code phishing.
Elevating Your Security Posture: Nuclei for Vulnerability Assessment’s
Explore Nuclei, a top vulnerability scanner enhancing cybersecurity through swift, efficient system checks. Boost security with this open-source powerhouse.
Active Directory Environment – Initial Setup of the End-User Machines
Step-by-step guide on setting up a Windows 11 VM in an Active Directory lab with VMware, including installation, configuration, and essential tips.
Navigating Web Security: A Beginner’s Guide to Using OWASP ZAP with DVWA
Dive into web app security with this guide on OWASP ZAP and DVWA. Learn scanning techniques and vulnerabilities for better digital protection.
Active Directory Environment: Installing Your First Domain Controller
Learn to set up an Active Directory domain controller, install Windows Server 2022, and prep for ethical hacking in our step-by-step guide.
Splunk Investigation: Deciphering the Cyber Siege on Wayne Enterprises
Explore the intricate cyber-attack on Wayne Enterprises and the strategic use of Splunk in cybersecurity. Delve into a detailed analysis across the Cyber Kill Chain, uncovering tactics, techniques, and the critical role of digital defenses. Learn from our comprehensive investigation to enhance your security posture in today’s evolving cyber threat landscape.
Adversarial Strategies Unlocked: Blue Team’s Approach to RootMe CTF
Introduction Welcome to my new series where I’ll be delving into capture the flag (CTF) hacking challenges with an innovative twist. Throughout this series, I’ll meticulously analyze, solve, and document these challenges from the perspective of a blue team member. The aim is to enrich our comprehension of the adversarial mindset, revealing the practical tactics, …
Read more “Adversarial Strategies Unlocked: Blue Team’s Approach to RootMe CTF”
Wireshark Investigation: Deciphering IcedID Malware Communications
Explore IcedID malware analysis with Wireshark: Uncover risks, hands-on investigation tips, and cybersecurity defenses in this in-depth blog post.