RRunbearinrunbear.hashnode.dev路10h ago 路 7 min readWe Won $1,000 in AI Credits at a Hackathon. Then Lost Them to Trial AbuseA few days after our team placed third in a hackathon and received roughly $1,000 in Anthropic credits, we had a good problem: more budget to let teams evaluate Runbear. By the end of the weekend, mos00
MBMichael Bestman Osemudiameninmichaelbestman.hashnode.dev路1d ago 路 4 min readHunting IOCs in Linux: From Cryptominers to C2 PersistenceFor weeks, I have had to battle cold and fever. & while the weather had been a spine, I found myself once again staring at my screen, confronting what I think was another challenging phase in my learn00
YPYogeshwar Peelainexploitnotes.hashnode.dev路1d ago 路 9 min readTryHackMe : After Hours WriteupSummary The provided archive contains a raw dump of a Windows CIM repository - the backing store for WMI (INDEX.BTR, MAPPING1.MAP, MAPPING2.MAP, MAPPING3.MAP, OBJECTS.DATA, normally found at C:\Window00
HSHemant Sharmainhemant-cybersec.hashnode.dev路3d ago 路 3 min readBuilding an Automated Linux SOC Triage Script with Bash馃搶 Introduction When responding to a potential Linux endpoint compromise, every second counts. Manually inspecting authentication logs, active socket states, running processes, and cron jobs across mu00
HSHemant Sharmainhemant-cybersec.hashnode.dev路4d ago 路 3 min readBuilding an Automated SOC Endpoint Triage Script with PowerShell馃搶 Introduction During a security incident or host investigation, speed and accuracy are everything for a SOC analyst. Manually checking running processes, network connections, installed patches, and 00
SSaguninsagunwrites.hashnode.dev路4d ago 路 6 min readIncident Response to MalwareDiscovering malware inside a system is only the beginning of a cybersecurity battle. The real challenge comes afterward: How did it enter? How far did it spread? What damage occurred? How can the orga00
SSaguninsagunwrites.hashnode.dev路4d ago 路 6 min readIndicators of Compromise (IOCs)When a cyberattack happens, one of the biggest challenges for security teams is discovering: "Are we infected?" Attackers rarely announce their presence. They try to remain hidden. They may silently s00
SSaguninsagunwrites.hashnode.dev路4d ago 路 6 min readMalware SandboxingWhen cybersecurity researchers discover a suspicious program, they face a difficult challenge. They need to understand what the malware does. But they cannot simply run it on a normal computer. A mali00
SSaguninsagunwrites.hashnode.dev路4d ago 路 6 min readDynamic Malware AnalysisStatic analysis helps researchers understand what malware contains. But sometimes looking at the code is not enough. A malware sample may hide its real purpose. It may encrypt its strings. It may hide00
SSaguninsagunwrites.hashnode.dev路4d ago 路 9 min readIntroduction to Malware AnalysisImagine discovering a suspicious program on a computer. You don't know who created it. You don't know what it does. You don't know whether it is stealing information, communicating with an attacker, m00
