Tag: blueteam

• TryHackMe | Benign

  

  In this post, I’ll be working through a suspicious process execution exercise from TryHackMe to practice investigating event logs in Splunk. In this exercise, I’m given Windows event logs from an infected host to analyse. By filtering events in Splunk and extracting key data points, anomalies are discovered and attacker activities are uncovered. Task 1  Introduction…

  igor_sec

  October 30, 2023

  TryHackMe

  blueteam, ctf, cyberdefense, cybersecurity, hacking, learning, Siem, splunk, thm, TryHackMe, write-up