SOC HTB - Section 7: Intro to Network Traffic Analysis
Introduction Network Traffic Analysis Network Traffic Analysis (NTA) play an active role in: Collecting Real-time traffic within the network to analyze upcoming threats. ...
Hallibut
SOC HTB - Section 6: Windows Attacks & Defense
Windows Attacks & Defense Setting the stage Introduction and Terminology What is Active Directory? Active Directory (also called AD), release in 2000, is a directory service for windows ent...
SOC HTB - Section 5: Understanding Log Sources & Investigating with Splunk
Splunk Fundamentals Introduction To Splunk & SPL What Is Splunk? Splunk is a tool used to collect, query, and analyze computer logs (could be use in real-time). Splunk’s (Splunk Enterpris...
SOC HTB - Section 4: Introduction to Threat Hunting & Hunting With Elastic
Threat Hunting Fundamentals Threat Hunting Definition The average time from when a system is compromised until it is detected is called dwell time, which often lasts from a few weeks to severa...
SOC HTB - Section 3: Windows Event Logs & Finding Evil
Introduction Windows Event Logs Windows Event Logging Basics Windows Event Logs are an intrinsic part of the Windows Operating System. Event logs can be accessed using the Event Viewer applicat...