InAnton on SecuritybyAnton Chuvakin·1h ago“I Don’t Need a SIEM, I Have Ollama!” (Yes, You Do!)Warning: this blog is an experiment. The idea for a blog came from a real conversation I had with somebody. The content is researched…
Paul T. Sarsih·Oct 25TryHackme: Log Analysis with SIEM — Web Application LogsOther important data sources for analysis include the Web. Let’s discuss them in more detail.
Paul T. Sarsih·Oct 25TryHackme: Log Analysis with SIEM -Linux LogsWhen you’re analysing Linux systems in a SIEM, you’ll often start by looking at two key log sources.
Paul T. Sarsih·Oct 25TryHackme: Log Analysis with SIEM -Window LogsWhen using a SIEM to analyse Windows logs, we usually talk about two main data sources: WinEventLogs and Sysmon. The second one must be…
Paul T. Sarsih·Oct 25TryHackme: Log Sources OverviewLet’s explore the Log Sources that an analyst can come across in SIEM and the value they can provide to the analyst. Every organisation has…
Paul T. Sarsih·Oct 25Tryhackme : Log Analyst with SIEM (THM)Any modern SOC analyst must be able to effectively use a SIEM to analyse and correlate logs while quickly identifying malicious activity…
Jose Praveen·Oct 24Handbook for the Recently Compromised — Log AnalysisTrace an intrusion through Windows event logs and uncover what happened on the workstation.
PRiTi.EX·Oct 24Handbook for the Recently Compromised — Tryhackme WriteupA Windows workstation has been flagged for unusual activity. Examine its event logs, follow the sequence of suspicious actions, and piece…
ctrlsina·Oct 23TryHackMe “Juicy Details” WriteupThis is a writeup for TryHackMe room “Juicy Details” with some addition. Originally a final project for a cybersecurity bootcamp at…
