Blue team

Boss of the SOC v2

Red team
Green team
Purple team
Ty Myrddin

Initializing search

Blue team

Going places
Going places
- Blue team @SOC
  Blue team @SOC
  - Network traffic analysis (NTA)
  - Digital forensics and incident response (DFIR)
  - Endpoint detection and response (EDR)
  - Security information and event management (SIEM)
    
    Security information and event management (SIEM)
    
    SIEM and threat intelligence/hunting notes
    
    An investigation with Splunk + CKC
    
    TryHackMe rooms
    
    Puzzles @Cyberdefenders
    
    Boss of the SOC v2
    
    Boss of the SOC v2
    
    Introduction
    
    Data dive
    
    Web activity investigation
    
    Detecting SQL and XSS web application attacks
    
    USB attack investigation
    
    Investigating FTP
    
    Boss of the SOC v2 Boss of the SOC v2
    Table of contents
    
    Introduction
    
    Data dive
    
    Web activity investigation
    
    Detecting SQL and XSS web application attacks
    
    USB attack investigation
    
    Investigating FTP
    
    Big-Picture view of current real-world attacks
    
    Security Detectors for Wazuh (Mock Mode) @GitHub
- Blue team for dev
- Blue team @Home

Boss of the SOC v2¶

Proof that 'detection' is just fancy panic.

Introduction
Data dive
Web activity investigation
Detecting SQL and XSS web application attacks
USB attack investigation
Investigating FTP

Last update: 2025-05-12 14:39

Previous CyberCorp Case 2

Next Introduction

© Copyright 2025, TyMyrddin.

Created using Sphinx 7.2.6. and Sphinx-Immaterial

Made with love in the Unseen University, 2025, with a forest garden fostered by /ut7