InfoSec_Bret

Challenge - Android Infostealer

InfoSec_Bret

Challenge - RDP Bitmap Cache

InfoSec_Bret

IR -SOC176 - RDP Brute Force Detected

InfoSec_Bret

Challenge - Silent Drain

InfoSec_Bret

IR -SOC281 - System Network Configuration Discovery Detected

InfoSec_Bret

IR - SOC291 - System Time Lookup Detected

InfoSec_Bret

Tunnel Vision Talk

InfoSec_Bret

Challenge - AS-REP Challenge

InfoSec_Bret

Challenge - ICS FuelStation

InfoSec_Bret

Challenge - Remote Access Regret

InfoSec_Bret

Challenge - Silent Update

InfoSec_Bret

IR - SOC299 - Potential UAC Bypass Attempt Detected

InfoSec_Bret

IR - SOC194 - Possible Reverse Shell Detected

InfoSec_Bret

IR - SOC270 - AsyncRAT Malware Detected

InfoSec_Bret

Challenge - MemLoot

InfoSec_Bret

IR - SOC221 - Possible WinRAR Zero-Day Activity

InfoSec_Bret

IR - SOC321 - Windows Defender Evasion Attempt

InfoSec_Bret

SA - SOC257 EventID 225 - VPN Connection Detected from Unauthorized Country

InfoSec_Bret

Challenge - Wordpress Web Forensics

InfoSec_Bret

SA - SOC153 EventID 238 - Suspicious Powershell Script Executed

InfoSec_Bret

IR - SOC293 - Exfiltration Over Pastebin Detected

InfoSec_Bret

IR - SOC293 - Exfiltration Over Pastebin Detected

InfoSec_Bret

IR - SOC300 - Right-to-Left Override Detected

InfoSec_Bret

IR - SOC344 - EDR Tampering Attempt via EDR-Freeze

InfoSec_Bret

Challenge - Golden Ticket

InfoSec_Bret

Challenge - Learn Sigma

InfoSec_Bret

SA - SOC275 EventID 250 - Application Token Steal Attempt Detected

InfoSec_Bret

Challenge - Hidden Backdoor

InfoSec_Bret

SA - SOC250 EventID 212 - APT35 HyperScrape Data Exfiltration Tool Detected

InfoSec_Bret

SA - SOC235 EventID 197 (Atlassian Confluence Broken Access Control 0-Day CVE-2023-22515)

InfoSec_Bret