Anouar RIYANE·4d agoInvestigating PHP2Shell: A SOC Analyst’s Journey from Apache Logs to Remote Code ExecutionWhen I started the dOOMs Day Sherlock, I had three useful sources of evidence: an Apache access log, an Apache error log, and a packet…
InfosecPandey·Oct 12Investigating a Phishing Incident in Microsoft SentinelA SOC Analyst’s Investigation Story
Ahmed Yasser·Sep 26Building a SOC Home Lab with Wazuh, Suricata, and Sysmon: From Attack Simulation to Incident…Introduction
Muhammad Usman·Sep 6Building a Centralized SOC Lab: Integrating Wazuh SIEM Telemetry with Graylog via Filebeat & DockerA step-by-step operational guide to forwarding endpoint security events from a Wazuh Manager VM to Graylog running on Windows using WSL2…
