Blue team

TryHackMe rooms

Red team
Green team
Purple team
Indigo team
Broomstick Brief
Ty Myrddin

Initializing search

Blue team

Going places
Going places
- Blue team @SOC
  Blue team @SOC
  - Network traffic analysis (NTA)
  - Digital forensics and incident response (DFIR)
  - Endpoint detection and response (EDR)
  - Security information and event management (SIEM)
    
    Security information and event management (SIEM)
    
    SIEM and threat intelligence/hunting notes
    
    An investigation with Splunk + CKC
    
    TryHackMe rooms
    
    TryHackMe rooms
    
    SIEM TryHackMe rooms
    
    VPN logs
    
    ItsyBitsy
    
    Investigating with Splunk
    
    Benign
    
    CaddyWiper and APT37
    
    Zerologon
    
    TryHackMe rooms TryHackMe rooms
    Table of contents
    
    SIEM TryHackMe rooms
    
    VPN logs
    
    ItsyBitsy
    
    Investigating with Splunk
    
    Benign
    
    CaddyWiper and APT37
    
    Zerologon
    
    Puzzles @Cyberdefenders
    
    Boss of the SOC v2
    
    Big-Picture view of current real-world attacks
    
    Security Detectors for Wazuh (Mock Mode) @GitHub
- Blue team for dev
- Blue team @Home
- Bulletproofing servers
- Honeytech for humans

TryHackMe rooms¶

Where you filter through enough junk logs to qualify as a digital archaeologist.

SIEM TryHackMe rooms
VPN logs
ItsyBitsy
Investigating with Splunk
Benign
CaddyWiper and APT37
Zerologon

Last update: 2025-06-05 07:02

Previous Delivery phase

Next SIEM TryHackMe rooms

© Copyright 2025, TyMyrddin.

Created using Sphinx 7.2.6. and Sphinx-Immaterial

Made with love in the Unseen University, 2025, with a forest garden fostered by /ut7