Cracked Deloitte’s Cyber Simulation by exposing a stealthy insider through Blue Team log forensics — SOC-mode: Activated.

The Beginning

Imagine this: You’re an attacker ready to get their hands on valuable data that you can sell to afford going on a sweet vacation. You do your research, your recon, everything, ensuring that there’s no way this can go wrong. The day of the attack, you brew…

Deceptive-Auditing is a tool that deploys Active Directory honeypots and automatically enables auditing for those honeypots.