Welcome🖐

Refer to Unattended for the challenge room on TryHackMe Task Our client has a new employee who observed a suspicious janitor leaving his office as he returned from lunch.  Investigate user activity between 12:05 PM and 12:45 PM on November 19, 2022. Identify any accessed and potentially exfiltrated files. Use... [Read More]

Refer to Directory for the challenge room on TryHackMe Scenario An alert has been triggered: "A user came across a poor file index, and their curiosity led to problems". Task Inspect the provided directory-curiosity.pcap located in ~/Desktop/exercise-files and retrieve the artefacts to confirm that this alert is a true positive.... [Read More]

Refer to Teamwork for the challenge room on TryHackMe Scenario An alert has been triggered: "The threat research team discovered a suspicious domain that could pose a potential threat to the organization." Task Review the teamwork.pcap file located in ~/Desktop/exercise-files and create artifacts for detection tools. According to VirusTotal, there... [Read More]

Refer to Trooper for the challenge room on TryHackMe Scenario A multinational technology company has faced multiple cyber attacks in recent months, resulting in the theft of sensitive intellectual property and disruptions to operations. A threat advisory report on these attacks has been shared. Task As CTI analysts, our objective... [Read More]

Refer to Carnage for the challenge room on TryHackMe Scenario Eric Fischer from the Purchasing Department at Bartell Ltd got an email from a familiar contact with a Word document attached. When he opened the document, he accidentally clicked "Enable Content." Soon after, the SOC Department got an alert that... [Read More]