ZZero Trust ThreadsSep 7 · 5 min readWhat Are Logs, and Why Do Security Teams Care About Them?Something happened on a computer. How would you know? Maybe someone logged in. Maybe an application crashed. Maybe a user accessed a file. Maybe a firewall blocked traffic. Maybe a web server receivedzerotrustthreads.hashnode.dev
AAbdulmujeeb UthmanSep 7 · 5 min readHow We Built a Centralized Security Monitoring Environment for a Healthcare Supply Chain Company The Brief MedCore Logistics is a simulated healthcare supply chain company with a real problem: no centralized visibility across its endpoints and cloud infrastructure. No one knew what was happening devwithmujeeb.hashnode.dev
KKajal DhanjalAug 18 · 12 min readAnatomy of an identity compromiseWhy nothing fired When a detection misses, the first instinct is to blame the rule. Wrong threshold, wrong table, wrong logic. Sometimes that is exactly right. But there is a class of intrusion where kajalbuilds.hashnode.dev
YYogeshwar PeelaAug 10 · 35 min readTryHackMe : Overflow The Jackpot writeup# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng1exploitnotes.hashnode.dev
YYogeshwar PeelaAug 8 · 9 min readTryHackMe : After Hours WriteupSummary The provided archive contains a raw dump of a Windows CIM repository - the backing store for WMI (INDEX.BTR, MAPPING1.MAP, MAPPING2.MAP, MAPPING3.MAP, OBJECTS.DATA, normally found at C:\Window1exploitnotes.hashnode.dev
KKajal DhanjalAug 5 · 9 min readWhat your logs can't seeThe premise "A detection rule can only fire on evidence that reached the platform." That sounds obvious written down, and it's routinely skipped in practice. When coverage gets audited, it gets auditekajalbuilds.hashnode.dev
YYogeshwar PeelaAug 4 · 6 min readTryHackMe : Packed Light WriteupTL;DR A .pcapng capture shows a victim host on 192.168.1.141 downloading a Python keylogger (updates.py) from an attacker-controlled "hotel update server" at byte-lotus-hotel.thm:8080 (34.41.103.191).1exploitnotes.hashnode.dev
SSunnyJul 29 · 16 min readTryHackMe OWASP Top 10 2025: IAAA Failures Beginner-Friendly Learning GuideIntroduction I recently completed the OWASP Top 10 2025: IAAA Failures room on TryHackMe as part of my ongoing cybersecurity learning journey. The OWASP Top 10 is one of the most important learning recybersecurity-learning.hashnode.dev
SSunnyJul 21 · 13 min readTryHackMe Defensive Security Intro Beginner-Friendly Learning GuideIntroduction I recently completed the Defensive Security Intro room on TryHackMe as part of my ongoing cybersecurity learning journey. Cybersecurity is not only about attacking systems or finding vulncybersecurity-learning.hashnode.dev
SSunnyJul 12 · 16 min readTryHackMe SOC Role in Blue Team Beginner-Friendly Learning Guide Introduction I recently completed the SOC Role in Blue Team room on TryHackMe as part of my ongoing cybersecurity learning journey. After learning the basics of Security Operations Center concepts, thcybersecurity-learning.hashnode.dev
