y0tz·Oct 12Investigating a Windows Logon Brute-Force Attack | Blue Team Labs Online Write-UpChallenge: BTLO — Bruteforce
usturlap·Aug 21SOC Alpha 1 Write-up or Introduction to Log AnalysisToday is a good day to analyze some alerts. If you are new to log analysis like me, this lab from blueteamlabs.online is for you. I will…
Tamerlan Shabanov·Jul 12The Walking Packets Write-UpPlatform: Blue Team Labs Online Lab: The Walking Packets
Veronica (g0blin)·Jun 15Dissecting the Meridian Labs “Bad Import” Incident — BTLO Labs Write-UpOn a Friday morning, three Windows machines at Meridian Labs — a 240-person engineering firm with a single customer-facing app — suddenly…
Veronica (g0blin)·Jun 7CloudTrail Hunt: BTLO AWeSome Lab WalkthroughFor SecureNetDynamics, the dreaded security nightmare of a ransomware attack became reality when dev_harry accidentally pushed AWS access…
Cyb3rT4ct1c14n-23·Feb 10MiddleMayhem: Investigating Web Application Exploitation and Lateral MovementIncident Response | Splunk SIEM | Next.js | Web Application Security
Cyb3rT4ct1c14n-23·Feb 6Deep Blue: Validating RDP Compromise and Post-Exploitation ActivityWindows Event Logs | DeepBlueCLI | Incident Response Fundamentals