Introduction

On February 25, 2022, the Security Operations Center (SOC) identified a suspicious URL request targeting webserver1001 (IP: 172.16.17.18)…

Today we are looking into an alert in the investigation main channel.

Introduction: 
James has received a suspicious VoIP call from an adversary disguising as a bank and trying to receive information about…

A walkthrough of Letsdefend’s SOC 140 Challenge

Introduction to CTI

Greetings readers, to yet another SOC Alert walk-through from LetsDefend.

Threat hunting is a proactive cybersecurity strategy. Rather than focusing solely on known threats, security teams hunt for advanced and…

I will be creating a step-by-step walkthrough for the Learn Sigma Challenge on Let's Defend.

Today, I dove into a Let's LetsDefend SOC Alert that introduced us to Forced Authentication Detected. This was another great practical…

I just completed another SOC Alert from LetsDefend, and this alert was for HyperScrape Data Ecfiltration Tool Detected. This alert…

Bu yazımızda aktif kullandığımız ürünlerin güncellenmelerini kontrol etmemiz gerektiğini göreceğiz. Path traversal açığıyla alakalı güncel…

The first thing to be done in the course of this investigation is to create a case for the event.