Masquerade (TryHackMe)
Link to the challenge on TryHackMe: Masquerade Scenario Jim from the Finance department received an email that appeared to come from the company’s system administrator, asking him to run a script to “

Link to the challenge on TryHackMe: Masquerade Scenario Jim from the Finance department received an email that appeared to come from the company’s system administrator, asking him to run a script to “

In modern environments, not every threat arrives as an obvious executable. Some hide in plain sight, disguised as everyday documents or trusted internal tools. In Wareville, where elves process countless files daily — surveys, reports, spreadsheets, ...

Before diving into this challenge, I’ve always found Windows-based malware analysis a bit intimidating and usually avoided it. However, this room completely changed my perspective. For the first time, I really enjoyed analysing an executable using to...

It’s the graveyard shift, and you’re the lone analyst in the SOC when an urgent call comes in: a user’s machine dropped a suspicious binary named windows-update.exe. At first glance, it masquerades as a routine updater, but alerts from the EDR and od...

In this article, we’ll cover the Sandboxes - If I can't find a nice malware to use, I'm not going, write-up as the Day 6 challenge of the Advent of Cyber event challenge. It was interesting to use YARA on Windows sandbox to detect malware using comma...
