Tag: Threat Hunting

Tag: Threat Hunting

All from controlled labs to real-world incident analysis, focused on detection, investigation, and response.

TShark Malware Investigation: Hunting Phishing & Malicious Downloads

TShark Malware Investigation through phishing, DNS, HTTP, IOC, and malware traffic analysis in a real SOC analyst workflow.

View >>

C2 Carnage: Investigating Malicious Network Traffic with Wireshark

C2 Carnage challenge using Wireshark to investigate malicious network traffic, identify Cobalt Strike C2 servers, and analyze malware activity.

View >>

Zeek Traffic Analysis & Threat Hunting | DNS Tunneling, Phishing, Log4Shell Detection

Zeek traffic analysis covering DNS tunneling detection, phishing investigation, Log4Shell exploitation attempts, Zeek signatures, Zeek scripts, and threat hunting through PCAP and log analysis.

View >>

Threat Hunting with Brim: Investigating Malware C2, Coin Mining, and Compromised Hosts

Threat Hunting with Brim, Zeek, and Suricata for DNS and PCAP analysis while investigating suspicious network traffic and compromised hosts.

View >>