Discussion

Zain

Cybersecurity, Malware Analysis, Reverse Engineering, Capture The Flag, Infosec

Mar 25

I Tracked an Attacker Who Typed 'ls' on a Windows Server

The attacker scanned a Joomla website with 17,547 requests, brute-forced the admin panel with 412 passwords in under two seconds, uploaded an encrypted PHP backdoor, got a shell, and typed ls. On a Wi

splunk-threat-hunt.hashnode.dev3 min read

#blueteam #siem #cybersecurity #splunk #threat-hunting #soc #incident-response #ransomware

Responses

No responses yet.

Search Hashnode

I Tracked an Attacker Who Typed 'ls' on a Windows Server

Responses

Recent in Forum