NNeville Iregi·Aug 13Finding out what Operating Systems are and do.Brief intro on what an OS is and how it works along with its relevance in malware analysis9 min read·m0ng00s3-blog.hashnode.dev
CConnor Harte·May 24Who am I?Hello! My name is Connor Harte, and I’m an aspiring cybersecurity analyst.The purpose of this blog is to showcase my passion for technology, document my learning journey, and share the skills I contin4 min read·connorhartecybersecurity.hashnode.dev
Rridesh raju bijwe·Mar 7⭐ SOC250 – APT35 HyperScrape Data Exfiltration Tool Detected Walkthrough (EventID:212)Letsdefend Alert Walkthrough4 min read·rideshcyber.hashnode.dev
Rridesh raju bijwe·Mar 4⭐ SOC173 – Follina 0-Day Detected Walkthrough (EventID:123)Letsdefend Alert Walkthrough4 min read·rideshcyber.hashnode.dev
Rridesh raju bijwe·Feb 19SOC163 – Suspicious Certutil.exe Usage Walkthrough (Event ID: 113)Letsdefend Alert Walkthrough3 min read·rideshcyber.hashnode.dev
Rridesh raju bijwe·Feb 19SOC164 - Suspicious Mshta Behavior Walkthrough (EventID:114)Letsdefend Alert Walkthrough3 min read·rideshcyber.hashnode.dev
Nnickson diaz·Feb 18SOC163 — Suspicious Certutil.exe Usage | LestDefendnow we have more knowledge and I think that It’ll be easy to do. Type: LOLBIN EVENTID: 113 Press enter or click to view image in full size What are Living-off-the-land binaries (LOLBins)? A LoLBin is any binary supplied by the operating system that ...3 min read·pruba.hashnode.dev
Rridesh raju bijwe·Feb 17⭐SOC282 – Phishing Alert: Deceptive Mail Detected Walkthrough (EventID:257)Letsdefend Alert Walkthrough3 min read·rideshcyber.hashnode.dev
Rridesh raju bijwe·Feb 13SOC335 – CVE-2024-49138 Exploitation Detected Walkthough (EventID: 313)Detailed SOC investigation of CVE-2024-49138 exploitation, including malware staging, PowerShell abuse, C2 traffic analysis, and response actions.3 min read·rideshcyber.hashnode.dev
Rridesh raju bijwe·Feb 10SOC257 – VPN Connection Detected from Unauthorized Country (EventID:225)(LetsDefend Alert Walkthrough)4 min read·rideshcyber.hashnode.dev
