ZTZero Trust Threadsinzerotrustthreads.hashnode.dev·5d ago · 5 min readWhat Are Logs, and Why Do Security Teams Care About Them?Something happened on a computer. How would you know? Maybe someone logged in. Maybe an application crashed. Maybe a user accessed a file. Maybe a firewall blocked traffic. Maybe a web server received00
AUAbdulmujeeb Uthmanindevwithmujeeb.hashnode.dev·6d ago · 5 min readHow We Built a Centralized Security Monitoring Environment for a Healthcare Supply Chain Company The Brief MedCore Logistics is a simulated healthcare supply chain company with a real problem: no centralized visibility across its endpoints and cloud infrastructure. No one knew what was happening 00
KDKajal Dhanjalinkajalbuilds.hashnode.dev·Aug 18 · 12 min readAnatomy of an identity compromiseWhy nothing fired When a detection misses, the first instinct is to blame the rule. Wrong threshold, wrong table, wrong logic. Sometimes that is exactly right. But there is a class of intrusion where 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 35 min readTryHackMe : Overflow The Jackpot writeup# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng10
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 8 · 9 min readTryHackMe : After Hours WriteupSummary The provided archive contains a raw dump of a Windows CIM repository - the backing store for WMI (INDEX.BTR, MAPPING1.MAP, MAPPING2.MAP, MAPPING3.MAP, OBJECTS.DATA, normally found at C:\Window10
KDKajal Dhanjalinkajalbuilds.hashnode.dev·Aug 5 · 9 min readWhat your logs can't seeThe premise "A detection rule can only fire on evidence that reached the platform." That sounds obvious written down, and it's routinely skipped in practice. When coverage gets audited, it gets audite00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 4 · 6 min readTryHackMe : Packed Light WriteupTL;DR A .pcapng capture shows a victim host on 192.168.1.141 downloading a Python keylogger (updates.py) from an attacker-controlled "hotel update server" at byte-lotus-hotel.thm:8080 (34.41.103.191).10
SSunnyincybersecurity-learning.hashnode.dev·Jul 29 · 16 min readTryHackMe OWASP Top 10 2025: IAAA Failures Beginner-Friendly Learning GuideIntroduction I recently completed the OWASP Top 10 2025: IAAA Failures room on TryHackMe as part of my ongoing cybersecurity learning journey. The OWASP Top 10 is one of the most important learning re00
SSunnyincybersecurity-learning.hashnode.dev·Jul 21 · 13 min readTryHackMe Defensive Security Intro Beginner-Friendly Learning GuideIntroduction I recently completed the Defensive Security Intro room on TryHackMe as part of my ongoing cybersecurity learning journey. Cybersecurity is not only about attacking systems or finding vuln00
SSunnyincybersecurity-learning.hashnode.dev·Jul 12 · 16 min readTryHackMe SOC Role in Blue Team Beginner-Friendly Learning Guide Introduction I recently completed the SOC Role in Blue Team room on TryHackMe as part of my ongoing cybersecurity learning journey. After learning the basics of Security Operations Center concepts, th00
