Learning by practicing

In this previous post , I focused on replaying logs in your QRadar lab environment. However, I never took the time to show the same for how ...

One of the critical steps in performing your network forensics analysis, is to be able to generate a visual of what transpired. This visual ...

Learning by Practicing Hack & Detect Leveraging the Cyber Kill Chain for Practical Hacking and its Detection via Network Forensic...

The first set of configuration you should do once you install bro, is to tell it the network(s) you would like to protect. Realistically, th...

In this post we are looking at installing Bro network and security monitoring framework. I happen to teach this tool in the SANS SEC503 - In...

The following alert was received from a Symantec Endpoint Protection (SEP) device <179>Jul 10 09:25:14 sep-papw01 SymantecServer: ...

In this post, I'm looking at using a two different tools to detect the known unknowns. Basically, I will be doing some host based threat...

Before I get going, I must confess, I was unable to execute volatility successfully against the Windows 10 machine. I got the "imageinf...

Now that we have access to the remote disk as seen in this post , we can now leverage our Linux based disk tools to analyze the remotely att...

Before we get going, it is assumed that you have already configured and installed F-Response on your client machines. That is you have your ...