Popular repositories Loading

1. botsv3-cryptojacking-investigation botsv3-cryptojacking-investigation Public

   SOC investigation of browser based Monero mining in the Splunk BOTSv3 dataset — CPU anomaly to DNS confirmation to delivery vector, plus the endpoint detection gap that let it run.

2. botsv3-bec-endpoint-investigation botsv3-bec-endpoint-investigation Public

   SOC investigation of a full endpoint compromise and Business Email Compromise at Frothly --> malicious LNK delivery through internal SharePoint, obfuscated PowerShell loader, UAC bypass, covert mai…

3. defender-bypass-winrar-cve-2023-38831 defender-bypass-winrar-cve-2023-38831 Public

   The purpose of this lab is to empirically demonstrate that relying solely on the free, built-in Microsoft Defender Antivirus is insufficient for small businesses. While free Defender provides basel…