Tag feed

#threat-hunting

55 posts33 followers

Explore Hashnode

Alternatives

Trending tags this week

JJebitoksharonjebitok.comSep 11 · 24 min read

Threat Hunting: Introduction

Link to the challenge on TryHackMe: Threat Hunting: Introduction Introduction Threat hunting is the systematic, proactive search for malicious activity in your environment that may have evaded detecti

0

HCHazel Chirindahazelsec.hashnode.devSep 11 · 9 min read

AI Is Changing Cybersecurity — But It Is Also Changing the Attacker

Artificial intelligence is becoming impossible to ignore in cybersecurity. Security vendors are adding AI assistants to their platforms. Analysts can use AI to help summarise incidents, understand ale

0

JJebitoksharonjebitok.comSep 9 · 6 min read

CTI for Alert Triage (TryHackMe)

Link to the challenge on TryHackMe: CTI for Alert Triage Introduction CTI for Alert Triage shifts gears from SIEM pivoting to something a lot of security writeups skip past: how a single high-severity

0

JJebitoksharonjebitok.comSep 9 · 2 min read

Detection and Analysis (TryHackMe)

Link to the challenge on TryHackMe: Detection and Analysis Introduction Detection and Analysis on TryHackMe puts you in the seat of an incident responder investigating a suspected business email compr

0

MM1Hm1h.hashnode.devAug 14 · 13 min read

Threat Hunting & Splunk Analysis: Investigating a data leak

Objective: My following write up for this challenge is a resource that covers how a SOC analyst operates, it combines my personal investigation along with: Learning Splunk: SPL across Sysmon and Windo

0

YPYogeshwar Peelaexploitnotes.hashnode.devAug 10 · 35 min read

TryHackMe : Overflow The Jackpot writeup

# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng

0

YPYogeshwar Peelaexploitnotes.hashnode.devAug 8 · 9 min read

TryHackMe : After Hours Writeup

Summary The provided archive contains a raw dump of a Windows CIM repository - the backing store for WMI (INDEX.BTR, MAPPING1.MAP, MAPPING2.MAP, MAPPING3.MAP, OBJECTS.DATA, normally found at C:\Window

0

SSagunsagunwrites.hashnode.devAug 5 · 6 min read

YARA Rules Explained

In cybersecurity, finding malware is often like searching for a needle in a huge digital haystack. Organizations may have thousands or even millions of files across their systems. Security researchers

0

YPYogeshwar Peelaexploitnotes.hashnode.devAug 4 · 6 min read

TryHackMe : Packed Light Writeup

TL;DR A .pcapng capture shows a victim host on 192.168.1.141 downloading a Python keylogger (updates.py) from an attacker-controlled "hotel update server" at byte-lotus-hotel.thm:8080 (34.41.103.191).

0

RMRodrigo Martinez Nuñezcyberdefenseprocess.hashnode.devJul 16 · 5 min read

Detecting Kerberoasting attacks with Splunk

Note: The dataset used is fictional Scenario Company IP address: 192.168.1.0/24 What is Kerberoasting? Kerberoasting is an attack that exploits Kerberos Service Tickets to obtain the password hash o

0

#threat-hunting

Search Hashnode

#threat-hunting

Explore Hashnode

Trending tags this week

Threat Hunting: Introduction

AI Is Changing Cybersecurity — But It Is Also Changing the Attacker

CTI for Alert Triage (TryHackMe)

Detection and Analysis (TryHackMe)

Threat Hunting & Splunk Analysis: Investigating a data leak

TryHackMe : Overflow The Jackpot writeup

TryHackMe : After Hours Writeup

YARA Rules Explained

TryHackMe : Packed Light Writeup

Detecting Kerberoasting attacks with Splunk