Tag: Incident Response

Tag: Incident Response

All from controlled labs to real-world incident analysis, focused on detection, investigation, and response.

Threat Hunting with Brim: Investigating Malware C2, Coin Mining, and Compromised Hosts

Threat Hunting with Brim, Zeek, and Suricata for DNS and PCAP analysis while investigating suspicious network traffic and compromised hosts.

View >>

SOC Level 1 Journey: Blue Team & SIEM with Lessons, Mistakes & Wins

30 days THM SOC Level 1 journey into Blue Team operations, SIEM log analysis, phishing detection, and real-world cyber defense scenarios.

View >>

Dissecting a Real Phishing Kit (SwiftSpend Case Study)

My Step-by-step analysis of a phishing attack, from email delivery to credential theft and network-level evidence.

View >>

From Spam to Breach: Real WordPress Security Incident & Credential Compromise Case Study

The WordPress Security Incident that started as spam & led to the discovery of a full site compromise: Incident response in a real-world scenario.

View >>