Setting up our first SOC and SIEM with Charlie Lima! - Special thanks for Eric Capuano
In December Played I with an awesome lab where we setup a SOC, spun up some VM's, Shutdown EDR on the Victim system and launched an attack through Sliver (C2 Framework) via my attack system on Linux. Then I counteracted with Lima Charlie as a security solution, created several D&R's and then ultimately configured blocks and automated Yara Scanning to return things back to normal. Even got some great information on how to establish a strong baseline for false positives. HOLY SMOKES THIS WAS SO GOOD. I've been getting requests from others requesting more information how they can get in on the action. So here's all the information you need. The ERIC CAPUANO blog course is a MUST. Highly recommended for anybody looking to get hands on with CyberSecurity. https://blog.ecapuano.com/p/so-you-want-to-be-a-soc-analyst-part FINALLY - Some hands on experience that bring the SOC world to life! Check out more information from Lima Charlie~ https://limacharlie.io/ The SecOps C...