TanmayDhanula·11h agoMalware Analysis:SOC109-Emotet Malware DetectedFirst lets start with alert information -
InFMI Cyber Security Consulting ServicesbyDigit Oktavianto·1d agoHunting on the Wire : A Practical Guide to Network Threat Hunting — Part 3A free, practical setup — Zeek, tshark, RITA, Security Onion and Malcolm — plus real datasets and five exercises to turn theory into muscle…
Akinola selim·1d agoSIEM Deployment Part 2: Adding Telemetry, Simulating Attacks and Performing Investigation in WazuhDuring the first part of this project, I set up my home lab and installed the Wazuh server and agents on my machines…
Dan Fottac·1d agoSentinel PE: Building an Open-Source Malware Triage, Explainable Detection, and Local Response…How we combined deep PE32/PE32+ static analysis, automated YARA/Sigma rule generation, and a DPAPI-protected encrypted quarantine vault —…
Vinit Rami·1d agoOne alert in, one verdict out: building IntelPulse 2.0 for a whole SOCHow I turned a single-user threat intelligence workbench into a self-hosted web app for a team, and what shipping it taught me that the…
Mustafa Demir·1d agoSplunk ile Log Analizi — Eğitim Notları 2SPL ile Filtreleme, Alan Seçimi ve İstatistiksel Analiz
Enes Cayvarli·2d agoThreat Hunting with Sigma: From Chainsaw to SplunkSigma is a powerful, platform-independent detection rule format that helps security analysts identify suspicious activities across…
Josh Rai·2d agoLespion Lab writeup — CyberDefendersThis time I’ll tell you how I had fun with solving Lespion Lab from Cyber Defenders. In my perspective, CyberDefenders website is a nice…
InDetect FYIbyRcegan·2d agoImplementing Detection as Code as a multi-platform MSSPWhat was once considered to be a niche within a niche, Detection as Code has become a very popular method of managing detection rules…A response icon1A response icon1
InFMI Cyber Security Consulting ServicesbyChristopher Ryan·3d agoKunai Analysis #1 — Analyzing Linux Activity with KunaiIn the previous article, we looked at how to build Linux threat detection with Kunai on an Ubuntu Server. Detection, however, is only one…
