Wireshark for Blue Teams: Spot Suspicious Traffic
Wireshark is the microscope of network defence. Logs tell you that something happened. A packet capture shows you exactly what
Learning Paths
Learning Paths
Learning Paths
Sysmon Configuration: Build a Config That Actually Detects
Sysmon is the single most valuable free upgrade you can give a Windows machine. Out of the box, Windows tells
Learning Paths
Sysmon Event IDs Explained: The Ones That Matter
Sysmon writes dozens of event types, and a beginner who opens the log sees a wall of numbers. The trick
Learning Paths
Splunk SPL for Security: 5 Queries Every SOC Analyst Needs
Splunk is one of the most common SIEM tools in real SOCs, and its search language, SPL, is a skill