Tag: email analysis

• TryHackMe | Boogeyman 1

  

  The room provided a phishing email, endpoint logs, and network traffic to analyze. By studying email headers, parsing JSON logs with JQ, and reconstructing events from packet captures, I uncovered how the threat actor gained initial access, enumerated the host, exfiltrated data, and maintained persistence. Key learning included inspecting encoded payloads, tracking command execution in…

  igor_sec

  November 20, 2023

  TryHackMe

  blog, cybersecurity, email analysis, hacking, jq, keepass, learning, thm, TryHackMe, tshark, wireshark, write-up