KDKajal Dhanjalinkajalbuilds.hashnode.dev·5d ago · 12 min readAnatomy of an identity compromiseWhy nothing fired When a detection misses, the first instinct is to blame the rule. Wrong threshold, wrong table, wrong logic. Sometimes that is exactly right. But there is a class of intrusion where 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 35 min readTryHackMe : Overflow The Jackpot writeup# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng10
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 8 · 9 min readTryHackMe : After Hours WriteupSummary The provided archive contains a raw dump of a Windows CIM repository - the backing store for WMI (INDEX.BTR, MAPPING1.MAP, MAPPING2.MAP, MAPPING3.MAP, OBJECTS.DATA, normally found at C:\Window10
KDKajal Dhanjalinkajalbuilds.hashnode.dev·Aug 5 · 9 min readWhat your logs can't seeThe premise "A detection rule can only fire on evidence that reached the platform." That sounds obvious written down, and it's routinely skipped in practice. When coverage gets audited, it gets audite00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 4 · 6 min readTryHackMe : Packed Light WriteupTL;DR A .pcapng capture shows a victim host on 192.168.1.141 downloading a Python keylogger (updates.py) from an attacker-controlled "hotel update server" at byte-lotus-hotel.thm:8080 (34.41.103.191).10
SSunnyincybersecurity-learning.hashnode.dev·Jul 29 · 16 min readTryHackMe OWASP Top 10 2025: IAAA Failures Beginner-Friendly Learning GuideIntroduction I recently completed the OWASP Top 10 2025: IAAA Failures room on TryHackMe as part of my ongoing cybersecurity learning journey. The OWASP Top 10 is one of the most important learning re00
SSunnyincybersecurity-learning.hashnode.dev·Jul 21 · 13 min readTryHackMe Defensive Security Intro Beginner-Friendly Learning GuideIntroduction I recently completed the Defensive Security Intro room on TryHackMe as part of my ongoing cybersecurity learning journey. Cybersecurity is not only about attacking systems or finding vuln00
SSunnyincybersecurity-learning.hashnode.dev·Jul 12 · 16 min readTryHackMe SOC Role in Blue Team Beginner-Friendly Learning Guide Introduction I recently completed the SOC Role in Blue Team room on TryHackMe as part of my ongoing cybersecurity learning journey. After learning the basics of Security Operations Center concepts, th00
SSunnyincybersecurity-learning.hashnode.dev·Jul 10 · 13 min readTryHackMe SOC Fundamentals Beginner-Friendly Learning GuideIntroduction I recently completed the SOC Fundamentals room on TryHackMe as part of my ongoing cybersecurity learning journey. A Security Operations Center, commonly known as a SOC, is one of the most00
JJJaewook Junginwoogi.me·Jun 23 · 9 min readMalware Analysis FundamentalsWhen a hash hits VirusTotal with one detection out of seventy, that's not enough to call it malicious. When it hits zero, that's also not enough to call it clean. Malware analysis is the work that fil00
