Hello everyone so today i will be writing about Elastic stack: the Basics room (answers will be provided in the screenshorts)

Detecting Kerberoasting Activity: Correlating Kerberos Events, PowerShell Logs, and Prefetch Artifacts

A hands-on DFIR walkthrough covering phishing analysis, malicious macros, memory forensics, C2 investigation, and persistence detection.

Before deploying malware, attackers often verify whether they are being watched. This investigation shows how offensive PowerShell tooling…

Overview

If you work in Digital Forensics and Incident Response (DFIR) or manage a Security Operations Center (SOC), you already know the truth…

Introduction

Room Overview

Overview

Introduction