Dec 29, 2025 · 3 min read · The Mission: SOC Operations Under Siege The 24-hour "Boss Rush" has reached a fever pitch. The Best Festival Company’s Security Operations Center (SOC) is currently in chaos, with dashboards lighting up with a "digital thunderstorm" of alerts. The Ev...
Join discussionDec 12, 2025 · 12 min read · This write-up came a little later than expected. The initial version of the Microsoft Sentinel environment was quite difficult to access, and it slowed down a lot of the hands-on progress. Thankfully, TryHackMe updated the Azure access, making everyt...
Join discussion
Sep 3, 2025 · 2 min read · Microsoft has reached an agreement to provide discounted cloud services to U.S. federal agencies, the General Services Administration (GSA) announced Tuesday. The deal is part of a broader initiative by the administration to streamline technology pro...
Join discussion
Jul 11, 2025 · 6 min read · Overview. DNS record manipulation is a subtle yet powerful technique often used by threat actors to intercept communication, reroute authentication flows, or disrupt services. Despite its impact, DNS change monitoring is often overlooked in security ...
Join discussion
Jul 10, 2025 · 9 min read · Section 1: Cisco Umbrella Identity Federation Configuration. Introduction. Cisco Umbrella is a cloud-delivered security platform that provides DNS-layer protection, secure web gateway (SWG), cloud-delivered firewall, and cloud access security broker ...
Join discussion
Jun 16, 2025 · 2 min read · Introduction. Security teams within Managed Security Service Providers (MSSPs) or multi-brand organisations often require visibility into several isolated Microsoft Sentinel instances. Without centralisation, analysts must switch between portals or a...
Join discussion
Jun 13, 2025 · 1 min read · Introduction. While making a small update to an analytics rule in Microsoft Sentinel, I hit an unexpected roadblock. I tried saving the rule, and Sentinel threw this error: Failed to save analytics rule '[REDACTED]'. Conflict: Newer instance of rule...
Join discussion
Dec 1, 2024 · 9 min read · Introduction In today’s digital landscape, protecting an organization’s IT infrastructure from evolving threats is more critical than ever. A robust Security Information and Event Management (SIEM) solution forms the backbone of modern cybersecurity ...
Join discussion
Aug 25, 2024 · 1 min read · What is SIEM - SIEM stands for Security Information and Event Management Primary Function - This is a tool that collects information from various sources.It then aggregates and analyzes and creates security report What else can SIEM do - SIEM can per...
Join discussion