Akinola selim·3d agoSIEM Deployment: Wazuh Server and Agent Installation on Ubuntu Server, Kali and Windows 10 Machines.It is more than necessary to have a centralized view and monitoring of your organization’s environment to be proactive in threat hunting…
ganeshbharkade·Oct 24Build Your First Cybersecurity Home Lab: A Beginner’s Step-by-Step GuidePart 1: Design a SOC lab on your laptop, with free tools and no paid subscriptions.
Bhumit Bhayani·Sep 13Open-Source SOC Stack: Deployment Planning & StrategyToday, I started exploring Taylor Walton’s “World’s Best SIEM Stack” playlist on YouTube, but instead of focusing only on installing and…
Gnarrrrr·Aug 10BTLO — Metadata ChallengeHi there welcome to my blog post. Today I will show you how I solve the Blue Team Labs Online Challenge titled META.
ibr_yzr·Jul 15Blue Team Labs Online: DeepBlue Investigation WalkthroughBlue Team Labs Online provides excellent investigation challenges that help improve Windows log analysis and DFIR skills.
Prince Lassey·Jul 3Squid Game - Blue Team Labs Online (Walkthrough)Today, I solved the Squid Game challenge on Blue Team Labs Online. Umm, making this write-up to help anyone facing challenges with it.
Veronica (g0blin)·Jun 15Dissecting the Meridian Labs “Bad Import” Incident — BTLO Labs Write-UpOn a Friday morning, three Windows machines at Meridian Labs — a 240-person engineering firm with a single customer-facing app — suddenly…
Veronica (g0blin)·Jun 6Tracing the Pivot: A Walkthrough of BTLO’s Rotten Cloud LabThe Rotten Cloud investigation involved utilizing Splunk to analyze cloud access logs across multiple platforms to trace the threat actor’s…
Alvaro Gonzalez Bosque·May 28Beyond the “True Positive”: Learning to read the evidence at the Endpoint (Case SOC127)In the world of security analysis, it’s easy to get carried away with the automated alerts of a SIEM. However, the analyst’s real work…
