Lets Defend

What is LetsDefend? LetsDefend is a Blue Team training platform that helps security learners gain experience by practicing their cyber investigation skills in a simulated SOC (Security Operations Center) environment. Its purpose is to assist current and future SOC analysts with their skills in investigating incidents and developing management reports. …

What is LetsDefend? LetsDefend is a Blue Team training platform that helps aspiring users gain experience by practicing their cyber investigation skills inside a simulated SOC (Security Operations Center) environment. Its purpose is to help current and future SOC analysts with their skills in investigating incidents and developing management reports. …

EventID: 83 What is LetsDefend? LetsDefend is a Blue Team training platform that helps aspiring users gain experience by practicing their cyber investigation skills inside a simulated Security Operations Center (SOC) environment. …

Alert — DNS Hijacking Detected

A brief resolution of the Investigate Web Attack challenge on LetsDefend.io Question 1 Which automated scan tool did attacker use for web reconnansiance?

Pesky Macros! I’ll just tell you know, we are five for five so far, let’s keep it rolling! So alright, a little difficulty at the beginning with choosing which alert to go with this time around. But, when in doubt we can at least narrow down which ones to potentially…

SOC118 - Internal Port Scan Activity Today, we will take a look at alert SOC118 in LetsDefend. The rule of the alert states that an internal port scan was initiated in the network. We will verify if this alert is indeed a true positive.

EventID: 85 What is LetsDefend? LetsDefend is a Blue Team training platform that helps aspiring users gain experience by practicing their cyber investigation skills inside a simulated SOC (Security Operations Center) environment. …

Getting Started to LetsDefend Register to soc analyst/incident response training platformapp.letsdefend.io Question 1: What type of exploit is running as a result of the relevant file running on the victim machine? Answer: {rtf.exploit}