⤷ Title: Events, Alerts, Anomalies, and Incidents: The Core of SOC Operations
════════════════════════
𐀪 Author: Pushkar Zend
════════════════════════
ⴵ Time: Wed, 01 Jan 2025 19:48:48 GMT
════════════════════════
⌗ Tags: #incident_response #alerts #cybersecurity #securityoperationscenter #soc
════════════════════════
𐀪 Author: Pushkar Zend
════════════════════════
ⴵ Time: Wed, 01 Jan 2025 19:48:48 GMT
════════════════════════
⌗ Tags: #incident_response #alerts #cybersecurity #securityoperationscenter #soc
Medium
Events, Alerts, Anomalies, and Incidents: The Core of SOC Operations
Introduction
⤷ Title: Detecting and Mitigating Command Execution Attacks: A Case Study on Let’sDefend Alert SOC168
════════════════════════
𐀪 Author: Gözde
════════════════════════
ⴵ Time: Sat, 15 Feb 2025 10:28:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #alerts #mitigation
════════════════════════
𐀪 Author: Gözde
════════════════════════
ⴵ Time: Sat, 15 Feb 2025 10:28:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #alerts #mitigation
Medium
Detecting and Mitigating Command Execution Attacks: A Case Study on Let’sDefend Alert SOC168
In cybersecurity, detecting command execution attacks early can prevent significant damage to an organization’s infrastructure. In this…
⤷ Title: Enhance your Incident Investigation and Response capabilities with Palo Alto Cortex XDR
════════════════════════
𐀪 Author: K O M A L
════════════════════════
ⴵ Time: Wed, 19 Feb 2025 21:49:45 GMT
════════════════════════
⌗ Tags: #cyberattack #cybersecurity #alerts #incident_response #palo_alto
════════════════════════
𐀪 Author: K O M A L
════════════════════════
ⴵ Time: Wed, 19 Feb 2025 21:49:45 GMT
════════════════════════
⌗ Tags: #cyberattack #cybersecurity #alerts #incident_response #palo_alto
Medium
Enhance your Incident Investigation and Response capabilities with Palo Alto Cortex XDR.
A threat-hunting platform for robust protection and rapid resolution
⤷ Title: SOC329 — CUPS RCE Detection via IPP Injection (CVE-2024–47177)
════════════════════════
𐀪 Author: Ghostploit
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 06:13:17 GMT
════════════════════════
⌗ Tags: #rce #letsdefendio #cve #soc #alerts
════════════════════════
𐀪 Author: Ghostploit
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 06:13:17 GMT
════════════════════════
⌗ Tags: #rce #letsdefendio #cve #soc #alerts
Medium
SOC329 — CUPS RCE Detection via IPP Injection (CVE-2024–47177)
Hello, my digital adventurers! Today, I’m going to investigate one of the LetsDefend alerts about CVE-2024–47177 to analyze its impact and…
⤷ Title: SOC282 — Phishing Alert — Deceptive Mail Detected Walkthrough
════════════════════════
𐀪 Author: Juan Martinez
════════════════════════
ⴵ Time: Sun, 30 Mar 2025 23:28:39 GMT
════════════════════════
⌗ Tags: #letsdefendio #cybersecurity #phishing_email #alerts
════════════════════════
𐀪 Author: Juan Martinez
════════════════════════
ⴵ Time: Sun, 30 Mar 2025 23:28:39 GMT
════════════════════════
⌗ Tags: #letsdefendio #cybersecurity #phishing_email #alerts
Medium
SOC282 — Phishing Alert — Deceptive Mail Detected Walkthrough
In this alert, I will be triaging a phishing email alert under LetsDefend as S0C282. Since this alert revolves around a suspicious email…
⤷ Title: Lets Defend Challenge — VoIP
════════════════════════
𐀪 Author: Juan Martinez
════════════════════════
ⴵ Time: Sun, 06 Apr 2025 01:08:34 GMT
════════════════════════
⌗ Tags: #wireshark #vishing #cybersecurity #alerts
════════════════════════
𐀪 Author: Juan Martinez
════════════════════════
ⴵ Time: Sun, 06 Apr 2025 01:08:34 GMT
════════════════════════
⌗ Tags: #wireshark #vishing #cybersecurity #alerts
Medium
Lets Defend Challenge — VoIP
Today, I will be doing the VoIP Challenge. In this challenge, I will use Wireshark to analyze a call that could be a vishing attempt. With…
⤷ Title: Must-Have Default Alert Rules in SOC Environments (With Realistic Scenarios)
════════════════════════
𐀪 Author: Esra Kayhan
════════════════════════
ⴵ Time: Wed, 09 Apr 2025 21:27:22 GMT
════════════════════════
⌗ Tags: #alerts #cyber #threat #security #cybersecurity
════════════════════════
𐀪 Author: Esra Kayhan
════════════════════════
ⴵ Time: Wed, 09 Apr 2025 21:27:22 GMT
════════════════════════
⌗ Tags: #alerts #cyber #threat #security #cybersecurity
Medium
Must-Have Default Alert Rules in SOC Environments (With Realistic Scenarios)
In cybersecurity, taking action quickly is the most effective way to prevent major damage. The primary mission of a Security Operations…
⤷ Title: Detected Suspicious XLS File Alert
════════════════════════
𐀪 Author: Juan Martinez
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 22:26:16 GMT
════════════════════════
⌗ Tags: #blueteamlabs #cybersecurity #soc_analyst #alerts
════════════════════════
𐀪 Author: Juan Martinez
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 22:26:16 GMT
════════════════════════
⌗ Tags: #blueteamlabs #cybersecurity #soc_analyst #alerts
Medium
Detected Suspicious XLS File Alert
As part of the SOC Analyst learning path, I completed the “SOC138 — Detected Suspicious Xls File” alert on LetsDefend (Event ID:
77). As…
77). As…
⤷ Title: Cybersecurity Alert: Hackers Exploit Zoom’s Remote Control Feature
════════════════════════
𐀪 Author: Ayush
════════════════════════
ⴵ Time: Wed, 14 May 2025 07:49:57 GMT
════════════════════════
⌗ Tags: #safety #zoom #alerts #cyberattack #cybersecurity
════════════════════════
𐀪 Author: Ayush
════════════════════════
ⴵ Time: Wed, 14 May 2025 07:49:57 GMT
════════════════════════
⌗ Tags: #safety #zoom #alerts #cyberattack #cybersecurity
Medium
Cybersecurity Alert: Hackers Exploit Zoom’s Remote Control Feature
In the digital age, remote collaboration tools like Zoom have become integral to business operations. However, their widespread adoption…
⤷ Title: Instalasi dan Konfigurasi Dasar Wazuh: Langkah Awal Membangun Benteng Digital Anda
════════════════════════
𐀪 Author: Sigit Adi Irianto
════════════════════════
ⴵ Time: Fri, 30 May 2025 17:47:30 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #siem #wazuh #alerts
════════════════════════
𐀪 Author: Sigit Adi Irianto
════════════════════════
ⴵ Time: Fri, 30 May 2025 17:47:30 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #siem #wazuh #alerts
Medium
Instalasi dan Konfigurasi Dasar Wazuh: Langkah Awal Membangun Benteng Digital Anda
Wazuh Series #2