Remote Full Packet Capture
Tool such as TCPDump captures full packet data and store to desk, it doesn’t provide a way to capture and stream the packets to a remote destination. I have ...
Posts by Tag
- SIEM 2
- SOC 2
- Zeek 1
- Network Forensics 1
- Quotes 1
- CTI 1
- SATs 1
- Jupyter 1
- Pandas 1
- Forensics 1
- Malware Analysis 1
SIEM
Back to Top ↑SOC
A tour inside a SOC analyst mind
As a mentor in a SOC, I often receive questions from junior analysts about the best way to approach analysis. To help them develop their skills, I sometimes ...
Analyzing SOC Data Using Jupyter Notebook
Detection Controls usually focus on telemetry collection, and in most cases lack data analytic capabilities. Hence, It would be necessary to export the data ...
Zeek
Zeek Notes
I have been using Zeek for my personal projects for sometime, I will write some Notes for using it and plan to update this list as I get into the advanced ca...
Network Forensics
Zeek Notes
I have been using Zeek for my personal projects for sometime, I will write some Notes for using it and plan to update this list as I get into the advanced ca...
Quotes
Best Quotes I Use in my Infosec Slides
“There is noting as useful as a good theory” —Kurt Lewin
CTI
Perception in intelligence analysis
By definition, Perception is the interpretations of sensory information in order to represent and understand the presented information, or the environment. I...
SATs
Using Structured Analytics Techniques in SOC
I keep trying to involve SATs (structured analytic techniques) in my daily Cyber security analysis work. I also keep looking for ways to measure the improvem...
Jupyter
Analyzing SOC Data Using Jupyter Notebook
Detection Controls usually focus on telemetry collection, and in most cases lack data analytic capabilities. Hence, It would be necessary to export the data ...
Pandas
Analyzing SOC Data Using Jupyter Notebook
Detection Controls usually focus on telemetry collection, and in most cases lack data analytic capabilities. Hence, It would be necessary to export the data ...
Forensics
Sysinternals case writeup
This is a small writeup for the sysinternals case recently published by Ali Hadi.
Malware Analysis
Sysinternals case writeup
This is a small writeup for the sysinternals case recently published by Ali Hadi.