Abuse traditional vulnerabilities via untraditional means.

Introduction

Simple guide to detect lateral movement using Splunk logs

Challenge room to investigate a compromised host.

An Exchange server was compromised with ransomware. Use Splunk to investigate how the attackers compromised the server.

Simple Splunk queries to detect Entra ID attacks and threats

Nmap

Attack chain from web bug to root access

In this write-up, we will walk through the Broken Code room on TryHackMe and demonstrate how to approach it step by step.

A windows machine has been hacked, its your job to go investigate this windows machine and find clues to what the hacker might have done.