PinnedKelvin LingUnderstanding Active Directory (AD) and Group PolicyActive Directory (AD) provides centralized authentication and authorization of users and computers on a network. It manages user…Mar 30, 2023Mar 30, 2023
PinnedKelvin LingInvestigate Attack Patterns using SIEM, Sysmon Utility and MITRE ATT&CKIn the “New Hire Old Artifacts” TryHackMe room, we can investigate a cyber incident using SIEM software — Splunk. The logs provided to…Mar 12, 2023Mar 12, 2023
PinnedKelvin LinginOSINT TeamInvestigate Cyber Attacks through OSINT“Juicy Details” TryHackMe Room simulates the aftermath of a cyber-attack where a SOC analyst is tasked with analyzing the attack patterns…Mar 10, 20231Mar 10, 20231
Kelvin LingPassive Recon through ExifTool, Social Engineering and WiGLEExifTool is an application for reading and modifying multimedia files such as images. Information contained in an image can be a starting…Apr 1, 2023Apr 1, 2023
Kelvin LinginVentureSearch Engine Indexing, SEO and Search TechniquesThis Medium write-up uses a TryHackMe room and a WordPress Content Management System (CMS) to explore search engine indexing, SEO mechanism…Mar 30, 2023Mar 30, 2023
Kelvin LingInvestigate a Compromised Exchange Server using SIEM and SysmonMicrosoft Exchange Server is commonly deployed in an enterprise, offering email, contact management, calendar, scheduling services, and…Mar 12, 2023Mar 12, 2023
Kelvin LingUsing Threat Intelligence Tools to Investigate Cyber AttacksTryHackMe Room: https://tryhackme.com/room/threatinteltoolsFeb 26, 2023Feb 26, 2023
Kelvin LingAn Introduction to using Splunk for Malware AnalysisSplunk is one of the most widely used SIEM tools in enterprises. It offers centralized log management and analytics. Based on the log data…Feb 13, 2023Feb 13, 2023
Kelvin LingAn Overview of SIEM and Log ManagementSecurity Information and Event Management system (SIEM) software offers centralized log management and analytics. This article is an…Feb 12, 2023Feb 12, 2023
Kelvin LingThe Diamond Model — A Methodology for Analyzing Cyber-AttacksThe Diamond Model helps identify attributes of an intrusion. It analyzes cyber-attacks as it provides a holistic view of an event. This…Jan 19, 2023Jan 19, 2023