ruthran-sec·Oct 26Reconstructing a Full Attack Chain: TryHackMe Tempest Walkthrough (Workstation Attack Analysis)From a malicious Word document to a fully owned machine, using Sysmon logs, Timeline Explorer, Wireshark and Brim.
Chandan·Oct 1How to Install Sysmon for Advanced Windows Security LoggingHere are the step-by-step instructions from “How to Install Sysmon for Advanced Windows Security Logging” by Chandan Kumar :
Abdelkerim Abderahim·Oct 1From Brute Force to Data Exfiltration: A Full Walkthrough of a Windows Domain CompromiseA phishing investigation does not end when you identify a malicious email. That is where the real investigation begins.