MSDT Follina Vulnerability Exploitation and DetectionIntroduction As an Incident Responder, dealing with a zero-day exploit in your IT environment is one of those things you would not wish on your worst enemy. First disclosed in May 2021, the Follina exploit is a remote code execution (RCE) vulnerabili...Jan 30, 2023 · 4 min readadamchemiron.com
01. Setting up a Malware Analysis LabIntroduction In the recent past, I gained interest in malware/threat hunting and analysis of the various malware that has been affecting systems. As a SOC analyst and incident handler, I come across various alerts triggered by existing malware within...Oct 8, 2022 · 3 min readadamchemiron.com
Developing an Incident Response Plan for your Organization"Every incident starts as an event, but not all events become incidents" The gravity of that statement rings true to any incident response team that has had to deal with numerous events that, on the surface, seem to be an incident but turn out to be ...Jul 9, 2022 · 4 min readadamchemiron.com
Comparing two files using a Bash scriptThe beauty of scripting is the ability to automate mundane and repetitive tasks so that you can focus on other high value tasks. Before writing this article, I got a folder containing 15 documents varying between 20 to 30 pages each that I had to com...Jul 4, 2022 · 3 min readadamchemiron.com
Cron Jobs to Delete Files after 'X' daysWhat are cron jobs? The act of manually going through your files and deleting them can be very tedious. What if there was a simpler way to automate this process? Cue in cron jobs. Cron is a utility program that lets users input commands for schedulin...May 23, 2022 · 3 min readadamchemiron.com