OpenWire: Investigating Apache ActiveMQ RCE Using Wireshark
Investigating a Java deserialization vulnerability in Apache ActiveMQ that enables remote code execution through insecure class loading.
ShadowRoast: Active Directory Threat Hunting with Splunk
Hey Buddy!! Hope you are doing well. Welcome back to another lab of mine on threat hunting using Splunk. In this lab, I am going to analyze logs and determine the malicious activity of the attacker.
Threat Hunting QBot: Memory Forensics and IOC Analysis Using Volatility3
Hey Buddies! Welcome to another lab on forensics using Volatility3 tool.
Inside the GoldenSpray Attack: A SIEM Threat Hunting Journey
Welcome to my new blog on a blue-team lab named GoldenSpray. We shall use Splunk to solve this lab. We can alternatively use ELK tool to solve the lab also.
Analyzing Malicious APKs: Android Breach Investigation Lab
Welcome to a new blog where we will learn to use new tools- ALEAPP and jadx to investigate a malicious APK file.
Andromeda Bot Investigation: IOC Hunting with MemProcFS & EvtxECmd
Hey Everyone! Welcome back to my website. Today I am going to work on an interesting lab and learn a new tool on memory forensics -MemProcFS.
Exploring ELK- AzureHunt
Hey guys, Welcome back! Today I am going explore an interesting lab using ELK. Get ready!!!
REvil – GOLD SOUTHFIELD: Ransomware Investigation Using ELK Stack
Hello friends, welcome back to another investigation. In this lab, we will investigate a ransomware incident using the tool ‘Elk Stack’.
Intro To Splunk- AWSRaid Lab
Hey Buddy! In this post, we will dive into basics of Splunk with an easy lab.
Lab Time: Wireshark – RetailBreach
In this lab, we continue to explore Wireshark and how to use it for Network packet analysis.