Blue - EternalBlue
Root the target system through its available service using Metasploit.
By Ren Sie
Enumeration
Nmap
Target Scanning Result
[Read More]
-
-
Windows Forensics 2.0
Identify persistent threats on a comrpomised Windows machine, and create the Yara rule for furture preventation
By Ren SieRefer to Investigating Windows 2.0 for the challenge room on TryHackMe.Refer to Investigating Windows for the challenge room on TryHackMe Tool Task Scheduler: For viewing and analyzing scheduled tasks. Registry Editor: For searching registry keys related to scheduled tasks. Sysinternals Suite: Autoruns: Identify WMI entries and processes. Process Explorer: Investigating... [Read More] -
Malware Static Analysis - Malbuster
Discover malware and its associated information by inspecting the source code of an unknown binary using various tools.
By Ren SieRefer to Malbuster for the challenge room on TryHackMe Scenario As a Malware Reverse Engineer. Our team supports the SOC team when unknown binaries are detected. A SOC analyst found an alert triggered by suspicious binaries. Our job is to analyze these binaries and provide information to help the SOC... [Read More] -
Windows Forensics
Identify persistent threats on a comrpomised Windows machine
By Ren SieRefer to Investigating Windows for the challenge room on TryHackMe Scenario This challenge involves investigating a previously compromised Windows machine, presenting several key obstacles. Tasks #1 Whatâs the version and year of the windows machine? By going to "About" in Windows settings, we can find the machine's version and year.... [Read More] -
Boogeyman 3
Threat hunting on SIEM (Kibana)
By Ren SieRefer to Boogeyman3 for the challenge room on TryHackMe Scenario The Boogeyman bypassed Quick Logistics LLC's security by compromising an employee and remained undetected, waiting to launch further attacks. From initial email access, the attackers targeted CEO Evan Hutchinson to escalate their efforts.The email seemed suspicious, yet Evan opened the... [Read More]