Task 1 — Introduction

Sample Attack Mapping: Phishing → Ransomware (MITRE ATT&CK)

Microsoft Sentinel is only as powerful as the data it receives.

Every day, Microsoft Sentinel collects millions of security events from endpoints, identities, cloud services, firewalls, and applications.

TASK 1 Introduction

I built a Python tool that detects SSH brute-force attacks in real time and automatically blocks the attacker’s IP using iptables — running…

Menelusuri jejak digital seorang attacker, dari percobaan login yang gagal hingga backdoor yang tertinggal di server

Welcome back to Part 2 of this series, Hrik this side. If you’re new here, make sure to check out the previous part first. If you’re…

A practical reference for common SPL queries, commands, and operators.

A SIEM can collect enormous amounts of security telemetry.