Category: Threat Hunting

Category: Threat Hunting

All from controlled labs to real-world incident analysis, focused on detection, investigation, and response.

C2 Carnage Wireshark Traffic Analysis | Proven SOC Hunt

C2 Carnage: Investigating Malicious Network Traffic with Wireshark

C2 Carnage challenge using Wireshark to investigate malicious network traffic, identify Cobalt Strike C2 servers, and analyze malware activity.

View >>

Zeek, Traffic Analysis, phishing

Zeek Traffic Analysis & Threat Hunting | DNS Tunneling, Phishing, Log4Shell Detection

Zeek traffic analysis covering DNS tunneling detection, phishing investigation, Log4Shell exploitation attempts, Zeek signatures, Zeek scripts, and threat hunting through PCAP and log analysis.

View >>

Threat Hunting, Brim, Coin Mining, PCAP analysis, Malicious traffic

Threat Hunting with Brim: Investigating Malware C2, Coin Mining, and Compromised Hosts

Threat Hunting with Brim, Zeek, and Suricata for DNS and PCAP analysis while investigating suspicious network traffic and compromised hosts.

View >>

#1 Warzone: Warzone2, Malware Investigation, alert triage , Malware Traffic Analysis

Warzone2 SOC Investigation: Confirming a True Positive Malware Download Using Brim and VirusTotal

Warzone 2: Investigation using Brim and VirusTotal to validate IDS alerts, analyze PCAP traffic & escalate a confirmed true positive incident

View >>

#1 Warzone: Warzone2, Malware Investigation, alert triage , Malware Traffic Analysis

Warzone 1: Investigating MirrorBlast Malware C2 Traffic as a Tier 1 | Brim, Wireshark & NetworkMiner

Warzone 1: Mastering Malware Investigation through real IDS/IPS alert triage using Brim, Wireshark, and NetworkMiner to trace Malware C2 activity.

View >>

© 2026 Favour Gabriel. All rights reserved.