Investigating a Suspicious Email Using Wireshark.

Investigating a Malicious JAR File Using Java Decompiler, VirusTotal & MITRE ATT&CK.

Cyber Threat Intelligence (CTI) refers to the information collected, evaluated, and analyzed about cyber threats. It includes how, where…

Threat hunting is a proactive cybersecurity strategy. Rather than focusing solely on known threats, security teams hunt for advanced and…

I will be creating a step-by-step walkthrough for the Learn Sigma Challenge on Let's Defend.

We are going to dive into the PAN OS Command Injection Vulnerability (CVE-2024–3400). This attack is a command injection resulting from an…

Background

Today, I dove into another great SOC Alert from LetsDefend. This alert was triggered by a QR Code Phishing email.

Today, I dove into a Let's LetsDefend SOC Alert that introduced us to Forced Authentication Detected. This was another great practical…

I just completed another SOC Alert from LetsDefend, and this alert was for HyperScrape Data Ecfiltration Tool Detected. This alert…