Virustotal

In today’s digital age, cybersecurity has become more important than ever before. Hackers are constantly looking for vulnerabilities in our systems, and it’s up to us to take the necessary precautions to protect ourselves from these threats. Keep Your Software Updated One of the easiest ways to protect yourself from…

Hi Medium! Here we are again with a new article about Sentinel. In this article, we will take how we can introduce VirusTotal to Sentinel and how we use it for incident response. Contents Create a playbook or automation on Azure Configure the automation process to VT Add the playbook to our alert Resources…

Elf McBlue found an email activity while analysing the log files. It looks like everything started with an email… — Objectives of DAY-6 Learn what email analysis is and why it still matters. Learn the email header sections. Learn the essential questions to ask in email analysis. Learn how to use email header sections to evaluate an email. Learn to use additional tools to discover email attachments and conduct further analysis.

EventID: 85 What is LetsDefend? LetsDefend is a Blue Team training platform that helps aspiring users gain experience by practicing their cyber investigation skills inside a simulated SOC (Security Operations Center) environment. …

If you haven’t done task 3 yet, here is the link to my write-up it: Task 3 Examining Our Patient. Task 4 Post Actions Now that we’ve performed some basic forensics, let’s go a step further and see what the community at large has to say about the items we’ve discovered. Check out the…

TryHackMe | Splunk 400 series questions Write-up Q. A Federal law enforcement agency reports that Taedonggang often spear phishes its victims with zip files that have to be opened with a password. What is the name of the attachment sent to Frothly by a malicious Taedonggang actor? Make sure to…

Introduction to YARA rules — Yara is an open-source tool developed by Victor Alvarez of Virustotal and used in malware analysis and detection(but not limited to). With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Usually this part is put at the end…

Malware Propagation and Social Networks — Introduction An effective way for cybercriminals to spread malware is through the use of online social networks. These attackers take advantage of the diffusion power of these platforms to affect a larger number of users. In this post, we are going to build an app to stream tweets and analyzed them…

By Sharat Ganesh, Product Marketing, Google Chronicle Managed Security Service Providers (MSSPs) can deliver high-value security services for customers, helping to drive efficiencies in security operations across people, product, and processes. In an environment where the threat landscape continues to be challenging, MSSPs can allow customers to scale their security…