Tag feed

#threat-hunting

57 posts33 followers

Explore Hashnode

Alternatives

Trending tags this week

TLTirthak Likhartirthaklikhar.hashnode.devSep 28 · 6 min read

What EDR Reveals After a Suspicious Document Opens

When a Word document launches a command shell and that shell retrieves an executable, there is already a sequence worth investigating. The next question is how far it went. A downloaded file and a run

0

Oodufuwababajide77kay-security-labs.hashnode.devSep 29 · 4 min read

Network Discovery Detection: Visualizing Scans in Elastic SIEM

If you are training for a SOC analyst role knowing what a network scan won't be enough. You have to know exactly what it looks like in the logs and how to hunt for it. I recently tackled the "Network

0

JJebitoksharonjebitok.comSep 11 · 24 min read

Threat Hunting: Introduction

Link to the challenge on TryHackMe: Threat Hunting: Introduction Introduction Threat hunting is the systematic, proactive search for malicious activity in your environment that may have evaded detecti

0

HCHazel Chirindahazelsec.hashnode.devSep 11 · 9 min read

AI Is Changing Cybersecurity — But It Is Also Changing the Attacker

Artificial intelligence is becoming impossible to ignore in cybersecurity. Security vendors are adding AI assistants to their platforms. Analysts can use AI to help summarise incidents, understand ale

0

JJebitoksharonjebitok.comSep 9 · 6 min read

CTI for Alert Triage (TryHackMe)

Link to the challenge on TryHackMe: CTI for Alert Triage Introduction CTI for Alert Triage shifts gears from SIEM pivoting to something a lot of security writeups skip past: how a single high-severity

0

JJebitoksharonjebitok.comSep 9 · 2 min read

Detection and Analysis (TryHackMe)

Link to the challenge on TryHackMe: Detection and Analysis Introduction Detection and Analysis on TryHackMe puts you in the seat of an incident responder investigating a suspected business email compr

0

MM1Hm1h.hashnode.devAug 14 · 13 min read

Threat Hunting & Splunk Analysis: Investigating a data leak

Objective: My following write up for this challenge is a resource that covers how a SOC analyst operates, it combines my personal investigation along with: Learning Splunk: SPL across Sysmon and Windo

0

YPYogeshwar Peelaexploitnotes.hashnode.devAug 10 · 35 min read

TryHackMe : Overflow The Jackpot writeup

# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng

0

YPYogeshwar Peelaexploitnotes.hashnode.devAug 8 · 9 min read

TryHackMe : After Hours Writeup

Summary The provided archive contains a raw dump of a Windows CIM repository - the backing store for WMI (INDEX.BTR, MAPPING1.MAP, MAPPING2.MAP, MAPPING3.MAP, OBJECTS.DATA, normally found at C:\Window

0

SSagunsagunwrites.hashnode.devAug 5 · 6 min read

YARA Rules Explained

In cybersecurity, finding malware is often like searching for a needle in a huge digital haystack. Organizations may have thousands or even millions of files across their systems. Security researchers

0

#threat-hunting

Search Hashnode

#threat-hunting

Explore Hashnode

Trending tags this week

What EDR Reveals After a Suspicious Document Opens

Network Discovery Detection: Visualizing Scans in Elastic SIEM

Threat Hunting: Introduction

AI Is Changing Cybersecurity — But It Is Also Changing the Attacker

CTI for Alert Triage (TryHackMe)

Detection and Analysis (TryHackMe)

Threat Hunting & Splunk Analysis: Investigating a data leak

TryHackMe : Overflow The Jackpot writeup

TryHackMe : After Hours Writeup

YARA Rules Explained