⤷ Title: “The attacker only has to be right once.” And other lies we tell ourselves on the defenders side.
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 12:51:01 GMT
════════════════════════
⌗ Tags: #infosec #security #hacking #blue_team #red_team
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 12:51:01 GMT
════════════════════════
⌗ Tags: #infosec #security #hacking #blue_team #red_team
Medium
“The attacker only has to be right once.” And other lies we tell ourselves on the defenders side.
The advantage of the home court.
⤷ Title: Defending Active Directory: A Deep Dive into Kerberoasting Detection
════════════════════════
𐀪 Author: Mattiapertusati
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 14:12:34 GMT
════════════════════════
⌗ Tags: #infosec #active_directory #threat_hunting #blue_team #cybersecurity
════════════════════════
𐀪 Author: Mattiapertusati
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 14:12:34 GMT
════════════════════════
⌗ Tags: #infosec #active_directory #threat_hunting #blue_team #cybersecurity
Medium
Defending Active Directory: A Deep Dive into Kerberoasting Detection
1. Introduction to Kerberoasting and the Active Directory Threat Landscape
⤷ Title: Incident Response Fundamentals:
════════════════════════
𐀪 Author: Lifehacker
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 18:39:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #blue_team #incident_response #infosec
════════════════════════
𐀪 Author: Lifehacker
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 18:39:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #blue_team #incident_response #infosec
Medium
Incident Response Fundamentals:
My TryHackMe Journey
⤷ Title: TryHackMe: Brains
════════════════════════
𐀪 Author: Tde
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 19:25:09 GMT
════════════════════════
⌗ Tags: #red_team #ctf_walkthrough #tryhackme #blue_team #challange
════════════════════════
𐀪 Author: Tde
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 19:25:09 GMT
════════════════════════
⌗ Tags: #red_team #ctf_walkthrough #tryhackme #blue_team #challange
Medium
TryHackMe: Brains
Task 1:
⤷ Title: 22 Minutes to Domain Admin: What I Learned Reconstructing an Attack From 249 Log Events
════════════════════════
𐀪 Author: Bilal Ansari
════════════════════════
ⴵ Time: Fri, 09 Oct 2026 12:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #blue_team #incident_resposne #infosec #python
════════════════════════
𐀪 Author: Bilal Ansari
════════════════════════
ⴵ Time: Fri, 09 Oct 2026 12:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #blue_team #incident_resposne #infosec #python
Medium
22 Minutes to Domain Admin: What I Learned Reconstructing an Attack From 249 Log Events
When I was studying for Security+, I kept running into the same gap. The textbooks walk you through the incident response phases…
⤷ Title: Threat Hunting Home Lab: Your Personal Playground for Learning Adversary Behavior
════════════════════════
𐀪 Author: Faan Rossouw
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 19:07:59 +0000
════════════════════════
⌗ Tags: #Threat Hunting #Home Lab #RITA #Zeek #AC_Hunter #Blue Team #Cybersecurity Home Lab
════════════════════════
𐀪 Author: Faan Rossouw
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 19:07:59 +0000
════════════════════════
⌗ Tags: #Threat Hunting #Home Lab #RITA #Zeek #AC_Hunter #Blue Team #Cybersecurity Home Lab
Black Hills Information Security
Threat Hunting Home Lab: Your Personal Playground for Learning Adversary Behavior
⤷ Title: Forensic Data: How to Acquire and Retain Vital Evidence
════════════════════════
𐀪 Author: Ronald A Mays Jr
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 19:57:16 +0000
════════════════════════
⌗ Tags: #Forensic Data #Incident Response #EDR #legal #Digital Forensic Evidence #DFIR #Chain of Custody #Blue Team
════════════════════════
𐀪 Author: Ronald A Mays Jr
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 19:57:16 +0000
════════════════════════
⌗ Tags: #Forensic Data #Incident Response #EDR #legal #Digital Forensic Evidence #DFIR #Chain of Custody #Blue Team
Black Hills Information Security
Forensic Data: How to Acquire and Retain Vital Evidence
While “digital forensics” and “incident response” often appear together
(as in the acronym “DFIR”), they represent two distinct disciplines.
(as in the acronym “DFIR”), they represent two distinct disciplines.
⤷ Title: AI In SOC
════════════════════════
𐀪 Author: Hayden Covington
════════════════════════
ⴵ Time: Wed, 26 Aug 2026 10:00:57 +0000
════════════════════════
⌗ Tags: #SOC #AI #SOC analyst #AI Augmentation #Blue Team #Infosec for Beginners #Infosec Survival Guide #Blue Book
════════════════════════
𐀪 Author: Hayden Covington
════════════════════════
ⴵ Time: Wed, 26 Aug 2026 10:00:57 +0000
════════════════════════
⌗ Tags: #SOC #AI #SOC analyst #AI Augmentation #Blue Team #Infosec for Beginners #Infosec Survival Guide #Blue Book
Black Hills Information Security
AI In SOC
As AI becomes increasingly utilized throughout the security space, it’s important to consider how it should be used most effectively. We’ve all seen companies adding AI into every offering and function they perform, often as much as possible.
⤷ Title: Report As You Go: Maintaining Good Documentation for SOC Analysts
════════════════════════
𐀪 Author: Dan “Haircutfish” Rearden || haircutfish.com
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 21:28:06 +0000
════════════════════════
⌗ Tags: #Reporting #SOC #Infosec for Beginners #Infosec Survival Guide #Blue Book
════════════════════════
𐀪 Author: Dan “Haircutfish” Rearden || haircutfish.com
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 21:28:06 +0000
════════════════════════
⌗ Tags: #Reporting #SOC #Infosec for Beginners #Infosec Survival Guide #Blue Book
Black Hills Information Security
Report As You Go: Maintaining Good Documentation for SOC Analysts
Working in the SOC can be a grind. Whether triaging alerts, escalating to clients, or just trying to understand why users download malicious files, we feel the need to get through tickets as fast as possible. But in that rush, we can actually hinder our progress…
⤷ Title: LetsDefend Walkthrough: Detecting Insecure Direct Object Reference (IDOR) Attacks
════════════════════════
𐀪 Author: Joseph Atoyebi
════════════════════════
ⴵ Time: Fri, 09 Oct 2026 22:58:10 GMT
════════════════════════
⌗ Tags: #infosec #idor #tryhackme_walkthrough #cybersecurity #blue_team
════════════════════════
𐀪 Author: Joseph Atoyebi
════════════════════════
ⴵ Time: Fri, 09 Oct 2026 22:58:10 GMT
════════════════════════
⌗ Tags: #infosec #idor #tryhackme_walkthrough #cybersecurity #blue_team
Medium
LetsDefend Walkthrough: Detecting Insecure Direct Object Reference (IDOR) Attacks
A step-by-step SOC analyst guide to detecting and analyzing Insecure Direct Object Reference (IDOR) web attacks on the LetsDefend platform.