Room: https://tryhackme.com/room/introtosiem

We're all petrified about missing a critical event or misclassifying an alert, but when we're talking about incident response (IR), there are often hundreds if not thousands of alerts to parse through. It's easy to get caught up with one alert because it…

What happens when you stop reading SIEM docs and actually wire one up end-to-end?

Learn the fundamentals of SIEM and explore its features and functionality.

Learn more about SOC alerts and build a systematic approach to efficiently triaging them.

Ongoing VAPT learning | Part 11 of a multi-part series on the vulnerability assessment and penetration testing lifecycle

TL;DR: Many organizations run unprotected syslog listeners on port 514. I built a tool that exploits this through IP spoofing and…

Introduction

I Already Knew the Job. I Didn’t Know the Tools

A practical look at how modern Security Operations Centers detect, investigate, contain, and recover from cyber threats using a structured…