Vaishnavi Kolape·8h agoReal attack or false alarm? How I learned to triage alerts in a Splunk labA beginner’s way of thinking about security alerts, from a home lab with Splunk, Windows logs and Wireshark.
lawswin·3d agoWindows Endpoint Security Monitoring & SOC Investigation with SplunkA hands-on Windows endpoint monitoring and SOC investigation project
Benita N.·Nov 3When Login Failures Start Telling a StoryInvestigating suspicious authentication activity across 1,000 Windows security logs.
Tarif Bin Belal·Oct 26TryHackMe — Handbook for the Recently Compromised | Windows Event Log InvestigationRoom: Handbook for the Recently Compromised Platform: TryHackMe Difficulty: Easy Category: Windows Forensics / Log Analysis
ColdByte·Oct 9Hack The Box: Remote_Access_Regret — SherlockFollow how I investigated a Windows attack through PowerShell event logs, uncovering AMSI bypass, anti-forensic techniques, and more.
