The O365 Intrusion - Splunk (TryHackMe)
Link to the O365 Intrusion on TryHackMe Active investigation High Situation Report Vantage Dynamics' IT team escalated a report from their Accounts Payable department on 27 August. An employee, Marc
#soc-analyst
Posts tagged #soc-analyst
Zero Tolerance (TryHackMe)
Link to the challenge on TryHackMe: Zero Tolerance It was supposed to be a regular morning at ProbablyFine Ltd. L2 had just returned from paternity leave. L3 was hosting a live webinar on "Proactive
Challenge: Snapped Phish-ing Line (TryHackMe)
Link to challenge on TryHackMe: Snapped Phish-ing Line As a member of the IT department at SwiftSpend Financial, you are responsible for assisting employees with technical concerns. What initially app
Detection and Analysis (TryHackMe)
Link to the challenge on TryHackMe: Detection and Analysis Introduction Detection and Analysis on TryHackMe puts you in the seat of an incident responder investigating a suspected business email compr
Preparation (TryHackMe)
Link to the walkthrough on TryHackMe: Preparation Introduction The Preparation phase is the foundation of every effective incident response capability. Before an organization can detect, contain, or r
The Blue Team Perspective (TryHackMe)
Link to the Challenge on TryHackMe: The Blue Team Perspective index=botsv1 | stats count by sourcetype index=botsv1 sourcetype=fgt_utm subtype=ips | stats count by srcip | sort -count | head 1 i
