Defence blues

Boss of the SOC v2

Red tradecraft
Privacy greenhouse
Purple crossroads
Indigo observatory
Contact

Initializing search

Defence blues

Blue team @Purpleteaming
Blue team @SOC
Blue team @SOC
- Network traffic analysis (NTA)
- Digital forensics and incident response (DFIR)
- Endpoint detection and response (EDR)
- Security information and event management (SIEM)
  Security information and event management (SIEM)
  - SIEM and threat intelligence/hunting notes
  - An investigation with Splunk + CKC
  - TryHackMe rooms
  - Puzzles @Cyberdefenders
  - Boss of the SOC v2
    
    Boss of the SOC v2
    
    Introduction
    
    Data dive
    
    Web activity investigation
    
    Detecting SQL and XSS web application attacks
    
    USB attack investigation
    
    Investigating FTP
  - Boss of the SOC v2 Boss of the SOC v2
    Table of contents
    
    Introduction
    
    Data dive
    
    Web activity investigation
    
    Detecting SQL and XSS web application attacks
    
    USB attack investigation
    
    Investigating FTP
  - Big-Picture view of current real-world attacks
  - Security Detectors for Wazuh (Mock Mode) @GitHub
Blue team for dev
Blue team @Home
Bulletproofing servers
Golem Trust Computing Ltd.
Department of Silent Stability
The Home for Bewildered Beasts of Legend
Stormforge training grounds
Honeytech for humans

Boss of the SOC v2¶

Proof that 'detection' is just fancy panic.

Introduction
Data dive
Web activity investigation
Detecting SQL and XSS web application attacks
USB attack investigation
Investigating FTP

2026-04-01 20:54

© Copyright 2025, TyMyrddin.

Created using Sphinx 7.2.6. and Sphinx-Immaterial

Made with love in the Unseen University, 2025, with a forest garden fostered by /ut7