Day 17 of #AdventOfCyber. Splunk is a nifty lil app and very powerful for analyzing logs. #loganalysis #blueteam #socanalysis #cybersecurity
December 18, 2024 at 12:43 AM
Day 17 of #AdventOfCyber. Splunk is a nifty lil app and very powerful for analyzing logs. #loganalysis #blueteam #socanalysis #cybersecurity
Reverse Shell Alert: SOC Investigation Writeup
I analyzed PCAPs + Splunk logs to uncover:
• C2 channel
• ARP spoofing (MITM)
• DNS data exfiltration
• Plaintext credential leak
If you're into #CyberSecurity, #SOCAnalysis, or #TryHackMe this is for you.
#NetworkSecurity #DFIR #BlueTeam
I analyzed PCAPs + Splunk logs to uncover:
• C2 channel
• ARP spoofing (MITM)
• DNS data exfiltration
• Plaintext credential leak
If you're into #CyberSecurity, #SOCAnalysis, or #TryHackMe this is for you.
#NetworkSecurity #DFIR #BlueTeam
Unraveling a Network-Based Attack: TryHackMe First Shift CTF — Task 7: The Crown Jewel
Network Traffic Analysis and Forensics to Identify C2 Channels, ARP Spoofing, and Data Exfiltration Techniques
medium.com
April 28, 2026 at 6:22 AM
Reverse Shell Alert: SOC Investigation Writeup
I analyzed PCAPs + Splunk logs to uncover:
• C2 channel
• ARP spoofing (MITM)
• DNS data exfiltration
• Plaintext credential leak
If you're into #CyberSecurity, #SOCAnalysis, or #TryHackMe this is for you.
#NetworkSecurity #DFIR #BlueTeam
I analyzed PCAPs + Splunk logs to uncover:
• C2 channel
• ARP spoofing (MITM)
• DNS data exfiltration
• Plaintext credential leak
If you're into #CyberSecurity, #SOCAnalysis, or #TryHackMe this is for you.
#NetworkSecurity #DFIR #BlueTeam