Intro to Detection Engineering (TryHackMe)
Link to the challenge on TryHackMe: Intro to Detection Engineering Introduction Detection engineering is an important role and task for a security analyst. It involves developing processes that will g
#soc
Posts tagged #soc
Challenge: Investigating with Splunk (TryHackMe)
Link to Investigating with Splunk challenge on TryHackme SOC Analyst Johny has observed some anomalous behaviours in the logs of a few windows machines. It looks like the adversary has access to some
Have a Break (TryHackMe)
Investigation is a TryHackMe challenge inspired by a real cargo theft incident, set in a fictional ECTA (European Cargo Threat Assessment) framework. The scenario involves a missing refrigerated truck
Phishing Basics (TryHackMe)
Introduction Imagine this: You’ve been tasked with breaching a company’s defences during a pentesting engagement. Their firewalls are rock-solid, and their intrusion detection systems are impenetrable
Microsoft Intune Monitoring (TryHackMe)
Introduction Microsoft Intune is one of the most widely used Mobile Device Management (MDM) platforms in the enterprise. It is a powerful tool in the hands of IT and security teams, but it can also be
Detecting AD Post-Exploitation (TryHackMe)
Active Directory post-exploitation is where an attacker's real objectives come into focus. After achieving domain compromise, threat actors move into their endgame — whether that's establishing long-t
