Ahmet Badem·May 14SOC Analyst İçin Sysmon Rehberi: Kurulum, Konfigürasyon ve İlk Event AnaliziWindows ortamlarında güvenlik olaylarını yalnızca standart Event Logs üzerinden analiz etmek çoğu zaman yeterli görünürlük sağlamaz…
Coder Aayushi Y·May 12Day 6 of Cybersecurity: I Plugged in a USB Drive and Followed the Trail Windows Left BehindToday, I decided to investigate the logs generated when a removable device is inserted into your system. I inserted a USB drive with FAT32…
Daryl Brooks·May 8Walkthrough: Searching for Persistence - Incident Response InsightsIn this project, I’ll be analyzing Windows System Monitoring (Sysmon) logs for indicators of persistence from previous network intrusions…
Melo·Apr 12How to Investigate Suspicious Windows Activity Using Event ViewerWindows Event Viewer is one of the most powerful and underutilized forensic tools built right into every Windows machine. Security…
