dinura ransika·Nov 2Getting Started with Splunk SPL: What I Learned About Searching and Analyzing LogsA beginner’s guide to searching, filtering, and analyzing machine-generated data using Splunk Search Processing Language.
Ashish Devkota·Aug 24How to Investigate Phishing Emails: The Hidden Mechanics Behind Every MessagePart 1 — Email Fundamentals
usturlap·Aug 21SOC Alpha 1 Write-up or Introduction to Log AnalysisToday is a good day to analyze some alerts. If you are new to log analysis like me, this lab from blueteamlabs.online is for you. I will…
Harshavardhan Soudam·Jul 18Investigating a Cerber Ransomware Attack Using SplunkRansomware continues to be one of the most disruptive cyber threats organizations face today.
Angel·Jul 10THM Passive Recon RoomI will be going through this room as a way to get to know more about gathering info “ reconnaissance” about domains.
Winena Joann Jo·Jul 10Building a Mini SOC at Home: Deploying Wazuh, MISP, IRIS, and n8n TogetherWhat happens when you stop reading SIEM docs and actually wire one up end-to-end?
Omotiafe Aregbeyen·Jun 23From Python to Splunk: How I Translated My Detection Rules Into a Real SIEMIf you have read my previous article, you know I built a mini SIEM detection engine from scratch in Python. Its functions included parsing…
Junecoderr·Apr 13Let’s Defend: SOC287 — Arbitrary File Read On Checkpoint Security Gateway(CVE-2024–24919)In this blog, we will analyze a critical alert generated in the Let’s Defend SOC environment(SOC287), triggered by activity associated with…
