Insights and Case Studies in Cybersecurity

Overview AS-REP Roasting is an Active Directory attack that targets user accounts configured with “Do not require Kerberos preauthentication.” Unlike […]

Overview In this Hack the Box investigation, I analyzed over 500,000 events across multiple log sources to identify malicious activity

Overview This was one of those issues that feels like it could go a hundred different directions at first. My

Overview After deploying an internet-facing Cowrie honeypot and integrating it with Elastic SIEM, I began collecting attack data almost immediately.

Overview This was a project that had been sitting on my “to do list” for several months. I had come

Overview Over the past several months, I’ve been intentionally spending time working through hands-on detection and investigation exercises to sharpen

Overview I’ve been blessed to be extremely busy the first few months of this new year, both professionally and personally.

Overview To stay current with detection and response skills, I’ve started working through the Hack the Box SOC Analyst Pathway.

Expanding the Investigation In Part One, the focus was on quickly identifying attacker tooling and vulnerable endpoints using a lightweight