Jan 25TryHackMe Brim — Task 1 Introduction, Task 2 What is Brim?, & Task 3 The BasicsLearn and practice log investigation, pcap analysis and threat hunting with Brim. Task 1 Introduction BRIM is an open-source desktop application that processes pcap files and logs files. Its primary focus is providing search and analytics. In this room, you will learn how to use Brim, process pcap files and investigate log files…Tryhackme8 min readTryhackme8 min read
Jan 16TryHackMe Zeek Exercises — Task 3 Phishing, Task 4 Log4J, & Task 5 ConclusionIf you haven’t done task 1 & 2 yet, here is the link to my write-up of it: Task 1 Introduction & Task 2 Anomalous DNS. Getting the VM Started Click the green button labeled Start Machine, at the top of Task 1. The screen should split in half if it doesn’t go to…Tryhackme14 min readTryhackme14 min read
Jan 12TryHackMe Zeek Exercises — Task 1 Introduction & Task 2 Anomalous DNSPut your Zeek skills into practice and analyze network traffic. Task 1 Introduction The room invites you a challenge to investigate a series of traffic data and stop malicious activity under different scenarios. Let’s start working with Zeek to analyze the captured traffic. We recommend completing the Zeek room first, which will teach…Tryhackme8 min readTryhackme8 min read
Jan 11TryHackMe Zeek — Task 7 Zeek Scripts | Scripts and Signatures, Task 8 Zeek Scripts | Frameworks, Task 9 Zeek Scripts | Packages, & Task 10 ConclusionIf you haven’t done task 4, 5, & 6 yet, here is the link to my write-up of it: Task 4 CLI Kung-Fu Recall: Processing Zeek Logs, Task 5 Zeek Signatures, & Task 6 Zeek Scripts | Fundamentals. Getting the VM Started Click the green button labeled Start Machine, in the top of Task…Tryhackme25 min readTryhackme25 min read
Jan 10TryHackMe Zeek — Task 4 CLI Kung-Fu Recall: Processing Zeek Logs, Task 5 Zeek Signatures, & Task 6 Zeek Scripts | FundamentalsIf you haven’t done task 1, 2, & 3 yet, here is the link to my write-up of it: Task 1 Introduction, Task 2 Network Security Monitoring and Zeek, & Task 3 Zeek Logs. Getting the VM Started Click the green button labeled Start Machine, in the top of Task 1. The screen should…Tryhackme18 min readTryhackme18 min read
Jan 9TryHackMe Zeek — Task 1 Introduction, Task 2 Network Security Monitoring and Zeek, & Task 3 Zeek LogsIntroduction to hands-on network monitoring and threat detection with Zeek (formerly Bro). Zeek (formerly Bro) is an open-source and commercial network monitoring tool (traffic analyser). The official description; “Zeek (formerly Bro) is the world’s leading platform for network security monitoring. Flexible, open-source, and powered by defenders.” “Zeek is a passive…Tryhackme15 min readTryhackme15 min read
Jan 6TryHackMe NetworkMiner — Task 7 Exercises & Task 8 ConclusionIf you haven’t done Task 5 & 6 yet, here is the link to my write-up of it: Task 5 Tool Overview 2 & Task 6 Version Differences. Getting VM Started Go back to Task 1, at the top of the task is a green button labeled Start Machine. …Tryhackme11 min readTryhackme11 min read
Jan 5TryHackMe NetworkMiner — Task 5 Tool Overview 2 & Task 6 Version DifferencesIf you haven’t done Task 1 through Task 4 yet, here is the link to my write-up of it: TryHackMe NetworkMiner — Task 1 through Task 4 Getting VM Started Go back to Task 1, at the top of the task is a green button labled Start Machine. …Tryhackme11 min readTryhackme11 min read
Jan 4TryHackMe NetworkMiner — Task 1 through Task 4Learn how to use NetworkMiner to analyse recorded traffic files and practice network forensics activities. Task 1 Room Introduction NetworkMiner is an open-source traffic sniffer, pcap handler and protocol analyser. Developed and still maintained by Netresec. The official description; “NetworkMiner is an open source Network Forensic Analysis Tool (NFAT) for Windows (but also works…Tryhackme16 min readTryhackme16 min read
Jan 3TryHackMe Snort Challenge — Live Attacks RoomPut your snort skills into practice and defend against a live attack Task 1 Introduction The room invites you to a challenge where you will investigate a series of traffic data and stop malicious activity under two different scenarios. Let’s start working with Snort to analyse live and captured traffic. Before joining this…Tryhackme15 min readTryhackme15 min read
