--- title: "#letsdefend articles | Hashnode" description: "Explore 14 articles tagged #letsdefend on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/letsdefend" --- Tag # #letsdefend 14 posts · 0 followers [Neville Iregi](https://hashnode.com/@m0ng00s3) · [Aug 13](https://hashnode.com/posts/finding-out-what-operating-systems-are-and-do/6a7e09016cbf747fd751a9af) ### [Finding out what Operating Systems are and do.](https://m0ng00s3-blog.hashnode.dev/finding-out-what-operating-systems-are-and-do?utm_source=hashnode&utm_medium=feed) Brief intro on what an OS is and how it works along with its relevance in malware analysis 9 min read · [m0ng00s3-blog.hashnode.dev](https://m0ng00s3-blog.hashnode.dev/finding-out-what-operating-systems-are-and-do?utm_source=hashnode&utm_medium=feed) [Connor Harte](https://hashnode.com/@connorharte) · [May 24](https://hashnode.com/posts/who-am-i/69036754c71f9348e9830d6a) ### [Who am I?](https://connorhartecybersecurity.hashnode.dev/who-am-i?utm_source=hashnode&utm_medium=feed) Hello! My name is Connor Harte, and I’m an aspiring cybersecurity analyst.The purpose of this blog is to showcase my passion for technology, document my learning journey, and share the skills I contin 4 min read · [connorhartecybersecurity.hashnode.dev](https://connorhartecybersecurity.hashnode.dev/who-am-i?utm_source=hashnode&utm_medium=feed) [ridesh raju bijwe](https://hashnode.com/@rideshcyber) · [Mar 7](https://hashnode.com/posts/soc250-apt35-hyperscrape-data-exfiltration-tool-detected-walkthrough-eventid-212/69ab8dc45e2d42459184478a) ### [⭐ SOC250 – APT35 HyperScrape Data Exfiltration Tool Detected Walkthrough (EventID:212)](https://rideshcyber.hashnode.dev/soc250-apt35-hyperscrape-data-exfiltration-tool-detected-walkthrough-eventid-212?utm_source=hashnode&utm_medium=feed) Letsdefend Alert Walkthrough 4 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc250-apt35-hyperscrape-data-exfiltration-tool-detected-walkthrough-eventid-212?utm_source=hashnode&utm_medium=feed) [ridesh raju bijwe](https://hashnode.com/@rideshcyber) · [Mar 4](https://hashnode.com/posts/soc173-follina-0-day-detected-walkthrough-eventid-123/69a872b53b896f7ad661619b) ### [⭐ SOC173 – Follina 0-Day Detected Walkthrough (EventID:123)](https://rideshcyber.hashnode.dev/soc173-follina-0-day-detected-walkthrough-eventid-123?utm_source=hashnode&utm_medium=feed) Letsdefend Alert Walkthrough 4 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc173-follina-0-day-detected-walkthrough-eventid-123?utm_source=hashnode&utm_medium=feed) [ridesh raju bijwe](https://hashnode.com/@rideshcyber) · [Feb 19](https://hashnode.com/posts/soc163-suspicious-certutilexe-usage-walkthrough-event-id-113/699675b2768ff47f3a8b8e29) ### [SOC163 – Suspicious Certutil.exe Usage Walkthrough (Event ID: 113)](https://rideshcyber.hashnode.dev/soc163-suspicious-certutilexe-usage-walkthrough-event-id-113?utm_source=hashnode&utm_medium=feed) Letsdefend Alert Walkthrough 3 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc163-suspicious-certutilexe-usage-walkthrough-event-id-113?utm_source=hashnode&utm_medium=feed) [ridesh raju bijwe](https://hashnode.com/@rideshcyber) · [Feb 19](https://hashnode.com/posts/soc164-suspicious-mshta-behavior-walkthrough-eventid114/699675d891802341b2ec3b8d) ### [SOC164 - Suspicious Mshta Behavior Walkthrough (EventID:114)](https://rideshcyber.hashnode.dev/soc164-suspicious-mshta-behavior-walkthrough-eventid114?utm_source=hashnode&utm_medium=feed) Letsdefend Alert Walkthrough 3 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc164-suspicious-mshta-behavior-walkthrough-eventid114?utm_source=hashnode&utm_medium=feed) [nickson diaz](https://hashnode.com/@nickytv543) · [Feb 18](https://hashnode.com/posts/soc163-suspicious-certutilexe-usage-lestdefend/6995dea34f1651d3e3a036e9) ### [SOC163 — Suspicious Certutil.exe Usage | LestDefend](https://pruba.hashnode.dev/soc163-suspicious-certutilexe-usage-lestdefend?utm_source=hashnode&utm_medium=feed) now we have more knowledge and I think that It’ll be easy to do. Type: LOLBIN EVENTID: 113 Press enter or click to view image in full size What are Living-off-the-land binaries (LOLBins)? A LoLBin is any binary supplied by the operating system that ... 3 min read · [pruba.hashnode.dev](https://pruba.hashnode.dev/soc163-suspicious-certutilexe-usage-lestdefend?utm_source=hashnode&utm_medium=feed) [ridesh raju bijwe](https://hashnode.com/@rideshcyber) · [Feb 17](https://hashnode.com/posts/soc282-phishing-alert-deceptive-mail-detected-walkthrough-eventid257/6993d2cf4db2aadaa803fa25) ### [⭐SOC282 – Phishing Alert: Deceptive Mail Detected Walkthrough (EventID:257)](https://rideshcyber.hashnode.dev/soc282-phishing-alert-deceptive-mail-detected-walkthrough-eventid257?utm_source=hashnode&utm_medium=feed) Letsdefend Alert Walkthrough 3 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc282-phishing-alert-deceptive-mail-detected-walkthrough-eventid257?utm_source=hashnode&utm_medium=feed) [ridesh raju bijwe](https://hashnode.com/@rideshcyber) · [Feb 13](https://hashnode.com/posts/soc335-cve-2024-49138-exploitation-detected-walkthough-eventid-313/698ed418070ffe024e334a8e) ### [SOC335 – CVE-2024-49138 Exploitation Detected Walkthough (EventID: 313)](https://rideshcyber.hashnode.dev/soc335-cve-2024-49138-exploitation-detected-walkthough-eventid-313?utm_source=hashnode&utm_medium=feed) Detailed SOC investigation of CVE-2024-49138 exploitation, including malware staging, PowerShell abuse, C2 traffic analysis, and response actions. 3 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc335-cve-2024-49138-exploitation-detected-walkthough-eventid-313?utm_source=hashnode&utm_medium=feed) [ridesh raju bijwe](https://hashnode.com/@rideshcyber) · [Feb 10](https://hashnode.com/posts/soc257-vpn-connection-detected-from-unauthorized-country-eventid225/698b82af15c9001a7d150f72) ### [SOC257 – VPN Connection Detected from Unauthorized Country (EventID:225)](https://rideshcyber.hashnode.dev/soc257-vpn-connection-detected-from-unauthorized-country-eventid225?utm_source=hashnode&utm_medium=feed) (LetsDefend Alert Walkthrough) 4 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc257-vpn-connection-detected-from-unauthorized-country-eventid225?utm_source=hashnode&utm_medium=feed)