Ala eddine Khemissi·Oct 6LetsDefend — SOC138: Detected Suspicious Xls FileIn this investigation, I analyzed alert SOC138 (Event ID 77) triggered on the LetsDefend platform. The alert flagged a suspicious Excel…
Aayatullah Adeyemi·Oct 1SOC335 — CVE-2024–49138 Exploitation DetectedStep 1- Analysis: As always I started by reviewing the alert details. The rule associated with this alert is SOC335 — CVE-2024–49138…
Baraa Mohamed·Sep 28Investigating Local Privilege Escalation via chroot (CVE-2025–32463)LetsDefend SOC341 | Incident Response | Linux Privilege EscalationA response icon1A response icon1
Baraa Mohamed·Sep 27Investigating an EDR Tampering Attempt via EDR-Freeze (SOC344)A LetsDefend incident report analyzing an endpoint defense-evasion attempt involving EDR-Freeze after suspicious RDP and PowerShell…
Drew Arpino·Sep 23LetsDefend: Shellshock Challenge WalkthroughInvestigating a Shellshock Attack from a PCAP File with Wireshark
