Zeek Notes
I have been using Zeek for my personal projects for sometime, I will write some Notes for using it and plan to update this list as I get into the advanced ca...
Posts by Category
- Network Forensics 1
- General 1
- CTI 1
- Blueteaming 1
- Golang 1
- tools 1
- Security Analytics 1
- Analysis 1
- Forensics 1
Network Forensics
General
Best Quotes I Use in my Infosec Slides
“There is noting as useful as a good theory” —Kurt Lewin
CTI
Perception in intelligence analysis
By definition, Perception is the interpretations of sensory information in order to represent and understand the presented information, or the environment. I...
Blueteaming
Back to Top ↑Golang
Remote Full Packet Capture
Tool such as TCPDump captures full packet data and store to desk, it doesn’t provide a way to capture and stream the packets to a remote destination. I have ...
tools
Remote Full Packet Capture
Tool such as TCPDump captures full packet data and store to desk, it doesn’t provide a way to capture and stream the packets to a remote destination. I have ...
Security Analytics
Analyzing SOC Data Using Jupyter Notebook
Detection Controls usually focus on telemetry collection, and in most cases lack data analytic capabilities. Hence, It would be necessary to export the data ...
Analysis
A tour inside a SOC analyst mind
As a mentor in a SOC, I often receive questions from junior analysts about the best way to approach analysis. To help them develop their skills, I sometimes ...
Forensics
Sysinternals case writeup
This is a small writeup for the sysinternals case recently published by Ali Hadi.