Abuse.ch is a research project hosted by the Institue for Cybersecurity and Engineering at the Bern University of Applied Sciences in…

SwiftSpend Finance opened a new ticket, raising concerns about potential malware threats. The finance company, known for its strict…

Using MISP

OpenCTI is another open-sourced platform designed to provide organisations with the means to manage CTI through the storage, analysis…

A multinational technology company has been the target of several cyber attacks over the past few months. The attackers have successfully…

Introduction

This room challenges me to investigate multiple traffic captures with Zeek to detect and confirm malicious activity.

Brim is an open-source desktop app for analyzing pcap files and log files.It focuses on searching, filtering, and correlation using Zeek…

In this room, we will cover the fundamentals of packet analysis with Wireshark and investigate the event of interest at the packet-level…

Volatility is a free memory forensics tool developed and maintained by Volatility Foundation, commonly used by malware and SOC analysts.