Hey friend, welcome back! In a previous blog post I discussed the MITRE ATT&CK framework and how it was the “holy bible” for threat intelligence analysts. This framework covers all the ways adversaries can perform a cyber attack in a step-by-step fashion and it provides a common language for defenders…

Hey friend, welcome to this short series on hunting for persistence! In this series I have joined up with the team at Cympire to teach you how to hunt for adversary persistence mechanisms in your environment. …

Hey friend, welcome back! Today we will be delving into the MITRE ATT&CK framework. This framework is the holy bible of cyber threat intelligence. It provides a common language for describing and categorizing adversarial tactics, techniques, and procedures (TTPs) based on real-world observations. …

Hey friend, welcome back! Today we will be taking a look at “The Pyramid of Pain” and how you can make bad guys cry. The pyramid is an illustration that shows how some IOCs (Indicators of Compromise) are more difficult for an adversary to change than others. It’s creator, David…

Welcome to the third instalment in this threat hunting series! If you’ve been following along so far you should have a virtualised environment all setup and ready to hunt in using the DFIR tool Velociraptor. However, if you are just joining please see my previous post Threat Hunting II: Environment…

Welcome back to part II of this series on threat hunting! (apologies for the delay). In the first part of this series I discussed what threat hunting was, the level of maturity an organisation needs to reach in order to effectively develop a threat hunting capability, and why threat hunting…

How do you think computers are secured nowadays? You might think with firewalls or anti-virus solutions like Windows Defender. If you want to get fancy perhaps a VPN like [insert name of VPN which keeps coming up every time I want to watch a YouTube video] or something cool like…

Home labs are the bread and butter for any IT professional who wants to take their technical skills to the next level. Whether it is practising setting up an Active Directory environment or detonating malware to discover hidden functionality, home labs are the vehicle to drive your journey. Home labs…