DFIR | Classroom

TryHackMe Hunt Me II Typo Squatters: One MSI to Domain Admin

SOC Level 2

Hunt Me II Typo Squatters: One MSI to Domain Admin

TryHackMe Hunt Me I Payment Collectors: Phish to DNS Exfil

SOC Level 2

Hunt Me I Payment Collectors: Phish to DNS Exfil

TryHackMe Slingshot: Retracing a Web-Server Breach in ELK

SOC Level 2

Slingshot: Retracing a Web-Server Breach in ELK

TryHackMe Management Wants a Word: A Four-Layer DFIR Decryption Chain

Hacker Holidays

Management Wants a Word: A Four-Layer DFIR Decryption Chain

TryHackMe New Hire Old Artifacts: Hunting an Intrusion in Splunk

Splunk

New Hire Old Artifacts: Hunting an Intrusion in Splunk

TryHackMe After Hours: Persistence Hiding in the WMI Repository

Forensics

After Hours: Persistence Hiding in the WMI Repository