Posts

A Glossary of Terms : DFIR

This table holds a glossary of Terminology linked to DF, IR and DFIR activities.
CMD to PowerShell Ref

Hey! Hey, do you want a quick ref that transfers your CMD line knowledge to Powershell Well here it is! CMD PowerShell What is it? wevutil get-winevent Events !! Filter…
DNS Dig, Eyewitness & File Uploads

What I Learned from a Hack the Box Lab. While exploring a recent intermediate Hack The Box (HTB) lab, I spent some time sharpening my approach to web-focused enumeration and…
THM Write-Up : Summit

Back to it! Ok so in Summit you are playing the role of an analyst, you need to investigate a variety of system information to identify the threats presented during…
THM Wreath : Write-up [Part 2 ; Pivoting]

Welcome back! In Part 1 we were able to gain a foothold on a system primarily the front end webserver within Thomas Wreaths network. What did we collect along the…
Learning about Cyber First Responders

This post is more like a collection of notes that I have found useful, this page will have a focus on incident response. Order of Volatility This identifies the order…