Today we are looking into an alert in the investigation main channel.

Introduction: 
James has received a suspicious VoIP call from an adversary disguising as a bank and trying to receive information about…

A walkthrough of Letsdefend’s SOC 140 Challenge

Introduction to CTI

Greetings readers, to yet another SOC Alert walk-through from LetsDefend.

Threat hunting is a proactive cybersecurity strategy. Rather than focusing solely on known threats, security teams hunt for advanced and…

I will be creating a step-by-step walkthrough for the Learn Sigma Challenge on Let's Defend.

Today, I dove into a Let's LetsDefend SOC Alert that introduced us to Forced Authentication Detected. This was another great practical…

I just completed another SOC Alert from LetsDefend, and this alert was for HyperScrape Data Ecfiltration Tool Detected. This alert…

Bu yazımızda aktif kullandığımız ürünlerin güncellenmelerini kontrol etmemiz gerektiğini göreceğiz. Path traversal açığıyla alakalı güncel…

The first thing to be done in the course of this investigation is to create a case for the event.

Today I started another SOC Alert from LetsDefend. This alert focused on Malicious Macros being executed from an invoice received from a…

Greetings readers, to yet another SOC Alert walk-through from LetsDefend.

How I analyzed and contained a critical RCE attempt on LetsDefend (SOC342)

Today , we are going to investigate the SOC127 alert in LetsDefend.

EventID : 303