Posts

Showing posts from January, 2024

Setting up our first SOC and SIEM with Charlie Lima! - Special thanks for Eric Capuano

Image
 In December  Played I with an awesome lab where we setup a SOC, spun up some VM's, Shutdown EDR on the Victim system and launched an attack through Sliver (C2 Framework) via my attack system on Linux. Then I counteracted with Lima Charlie as a security solution, created several D&R's and then ultimately configured blocks and automated Yara Scanning to return things back to normal. Even got some great information on how to establish a strong baseline for false positives. HOLY SMOKES THIS WAS SO GOOD. I've been getting requests from others requesting more information how they can get in on the action. So here's all the information you need. The ERIC CAPUANO blog course is a MUST. Highly recommended for anybody looking to get hands on with CyberSecurity. https://blog.ecapuano.com/p/so-you-want-to-be-a-soc-analyst-part FINALLY - Some hands on experience that bring the SOC world to life! Check out more information from Lima Charlie~  https://limacharlie.io/ The SecOps C...

Microsoft Sentinel : Active Directory : Entra

Image
  Last month we had the opportunity to get our feet wet using Microsoft Azure - We wanted to learn the insides of Microsoft Sentinel and harness this powerful tool to configure a SIEM. We learned how to view alerts and understand basic analytics.  I highly recommend the free courses provided for Microsoft Associate Learners. Note: Microsoft Entra is now the update title for  Azure Active Directory (Azure AD ).  Stay tuned for more information on how this powerful cloud architecture works  as we'll continue getting hands on with in through February.

The Cyber WIRE Pod Cast

Image
                                                                      Click the image to check it out!      Directors Wray and Easterly warn congress of threats from Chinese hackers. Myanmar authorities extradite pig butchering suspects. Automation remains a challenge. Snyk Security Labs plugs holes in “Leaky Vessels.” Pegasus spyware targets human rights groups in Jordan. Subtle-paws scratch at Ukrainian military personnel. White Phoenix brings your ransomed files back from the ashes. In today’s Threat Vector, host David Moulton, Director of Thought Leadership at Unit 42, speaks with MDR Senior Manager Oded Awaskar, about how AI might change the world of security operations and threat-hunting. A wee lil trick for bypassing Chat GPT guardrails. This is my go to for ...

Cisco Packet Tracer Labs ROCK! - CCNA

Image
  I've been enjoying Neil Anderson's Cisco Packet Tracer labs a bunch. Learning to manually make changes to devices via Cisco IOS has been a fun and challenging experience. Highly recommend his courses! Networking has become second nature to me over the years and will marry together well with my Cybersecurity passion. hashtag # keeplearning Hands on Practice included : Factory Rest Password Recovery IOS System Image Backup and Recovery IOS Image Upgrade Special Thanks for Flackbox! www.Flackbox.com