Tag feed

#letsdefend-walkthroughs

4 posts0 followers

Explore Hashnode

Alternatives

Trending tags this week

RRridesh raju bijwerideshcyber.hashnode.devMar 7 · 4 min read

⭐ SOC250 – APT35 HyperScrape Data Exfiltration Tool Detected Walkthrough (EventID:212)

In this case study, I investigated a high-severity alert from the LetsDefend platform: SOC250 – APT35 HyperScrape Data Exfiltration Tool Detected This alert simulates activity associated with APT35, a

0

RRridesh raju bijwerideshcyber.hashnode.devMar 4 · 4 min read

⭐ SOC173 – Follina 0-Day Detected Walkthrough (EventID:123)

A Malware Investigation Walkthrough | LetsDefend SOC Lab Today’s alert involves a well-known real-world vulnerability: Follina (CVE-2022-30190) – Microsoft Office Remote Code Execution Vulnerability S

0

RRridesh raju bijwerideshcyber.hashnode.devMar 2 · 5 min read

⭐ SOC239 – Remote Code Execution Detected in Splunk Enterprise Walkthrough (EventID: 201)

A Real SOC Investigation | LetsDefend Walkthrough Today’s alert is a serious one: ⭐ SOC239 -Remote Code Execution Detected in Splunk Enterprise Whenever “RCE” appears in an alert title, the severity

0

RRridesh raju bijwerideshcyber.hashnode.devFeb 28 · 4 min read

SOC168 – Whoami Command Detected in Request Body Walkthrough (EventID:118)

A Command Injection Investigation | LetsDefend SOC Lab Today’s alert immediately caught my attention: Whoami Command Detected in Request Body At first glance, it may look like a harmless Linux command

0

#letsdefend-walkthroughs

Search Hashnode

#letsdefend-walkthroughs

Explore Hashnode

Trending tags this week

⭐ SOC250 – APT35 HyperScrape Data Exfiltration Tool Detected Walkthrough (EventID:212)

⭐ SOC173 – Follina 0-Day Detected Walkthrough (EventID:123)

⭐ SOC239 – Remote Code Execution Detected in Splunk Enterprise Walkthrough (EventID: 201)

SOC168 – Whoami Command Detected in Request Body Walkthrough (EventID:118)