In the previous article, we learned how Kusto Query Language (KQL) helps analysts search and investigate security logs.

Every cyberattack starts long before any exploit is executed. Today marks Day 1 of documenting my walkthrough of the Cyber Kill Chain on…

by Dan “Haircutfish” Rearden | haircutfish.com | Guest Author Working in the SOC can be a grind. Whether triaging alerts, escalating to clients, or just trying to understand why users […]

Introduction

Not every room needs a terminal and a reverse shell. ItsyBitsy hands you a Kibana dashboard, a pile of connection logs, and a story — an…

Room: Splunk: Setting up a SOC Lab Path: SOC Level 2, Section 2: Advanced Splunk Difficulty: Intermediate Time: 60 minutes Prerequisites…

TryHackMe Walkthrough: Splunk — Exploring SPL (Step-by-Step with Q&A) Room: Splunk: Exploring SPL Path: SOC Level 2 → Section 2: Advanced Splunk Difficulty: Intermediate | Time: ~60 min …

Task 1 — Introduction

Task 1 — Introduction

Sample Attack Mapping: Phishing → Ransomware (MITRE ATT&CK)