Tag feed

#splunk

89 posts42 followers

Trending tags this week

Why We Open-Sourced Our Audit Logging Instead of Using Splunk

5d ago · 6 min read · The quote from Splunk came in at $96,000 per year. For audit logging. Our CTO read the email, looked at me and said "we can build this." And for once, he was right. Sort of. The Enterprise Pricing Problem If you've ever priced enterprise logging solu...

Join discussion

JJebitoksharonjebitok.com

0

Exchange Online Monitoring (TryHackMe)

Mar 26 · 18 min read · Introduction Email is a critical communication channel in any organisation, which makes it a prime target for attackers. Once a mailbox is compromised, attackers can read emails, exfiltrate sensitive

Join discussion

ZZainsplunk-threat-hunt.hashnode.dev

0

I Tracked an Attacker Who Typed 'ls' on a Windows Server

Mar 25 · 3 min read · The attacker scanned a Joomla website with 17,547 requests, brute-forced the admin panel with 412 passwords in under two seconds, uploaded an encrypted PHP backdoor, got a shell, and typed ls. On a Wi

Join discussion

LSLEWIS SAWElewisawe.hashnode.dev

0

Fixit - Try Hack Me Walk Through

Mar 22 · 5 min read · Welcome to this hands-on challenge room. In this scenario, you've just completed your third screening interview for a Level 2 role at MSSP Cybertees Ltd, and you're now faced with the final assessment

Join discussion

JJebitoksharonjebitok.com

0

SharePoint Online Monitoring (TryHackMe)

Mar 20 · 13 min read · Introduction SharePoint Online is one of the most targeted M365 services, as it often stores sensitive files and can be used to propagate the attack. This room will explore the most common attack scen

Join discussion

JJebitoksharonjebitok.com

0

Detecting AD Lateral Movement (TryHackMe)

Mar 20 · 32 min read · Introduction In an AD environment, attackers who compromise a single account rarely stop there. They use built-in protocols like SMB and RDP to move from the initial foothold to servers that hold what

Join discussion

JJebitoksharonjebitok.com

0

Incident Handling With Splunk (TryHackMe)

Mar 14 · 28 min read · Website defacement is one of the more visible outcomes of a successful cyberattack, and investigating one end-to-end is a great way to practice mapping attacker behavior across the full Cyber Kill Cha

Join discussion

JJebitoksharonjebitok.com

0

Entra ID Monitoring (TryHackMe)

Mar 13 · 27 min read · Identity is now the primary attack surface in cloud environments. With Entra ID authentication endpoints exposed to the internet by design, attackers don't need to breach a network perimeter they just

Join discussion

JJebitoksharonjebitok.com

0

Detecting AD Initial Access (TryHackMe)

Mar 13 · 24 min read · When people think about Active Directory attacks, they often jump straight to lateral movement and privilege escalation. But before any of that happens, an attacker needs a foothold and in most enterp

Join discussion

JJebitoksharonjebitok.com

0

Data Exfiltration Detection (TryHackMe)

Mar 9 · 20 min read · Data exfiltration is the final and often most damaging stage of a cyberattack — the moment sensitive information leaves the organization's control. Whether through DNS tunneling, HTTP POST requests, F

Join discussion

#splunk

Search Hashnode

#splunk

Trending tags this week

Why We Open-Sourced Our Audit Logging Instead of Using Splunk

Exchange Online Monitoring (TryHackMe)

I Tracked an Attacker Who Typed 'ls' on a Windows Server

Fixit - Try Hack Me Walk Through

SharePoint Online Monitoring (TryHackMe)

Detecting AD Lateral Movement (TryHackMe)

Incident Handling With Splunk (TryHackMe)

Entra ID Monitoring (TryHackMe)

Detecting AD Initial Access (TryHackMe)

Data Exfiltration Detection (TryHackMe)