Defence blues

TryHackMe rooms

Red tradecraft
Privacy greenhouse
Purple crossroads
Indigo observatory
Contact

Initializing search

Defence blues

Blue team @Purpleteaming
Blue team @SOC
Blue team @SOC
- Network traffic analysis (NTA)
- Digital forensics and incident response (DFIR)
- Endpoint detection and response (EDR)
- Security information and event management (SIEM)
  Security information and event management (SIEM)
  - SIEM and threat intelligence/hunting notes
  - An investigation with Splunk + CKC
  - TryHackMe rooms
    
    TryHackMe rooms
    
    SIEM TryHackMe rooms
    
    VPN logs
    
    ItsyBitsy
    
    Investigating with Splunk
    
    Benign
    
    CaddyWiper and APT37
    
    Zerologon
  - TryHackMe rooms TryHackMe rooms
    Table of contents
    
    SIEM TryHackMe rooms
    
    VPN logs
    
    ItsyBitsy
    
    Investigating with Splunk
    
    Benign
    
    CaddyWiper and APT37
    
    Zerologon
  - Puzzles @Cyberdefenders
  - Boss of the SOC v2
  - Big-Picture view of current real-world attacks
  - Security Detectors for Wazuh (Mock Mode) @GitHub
Blue team for dev
Blue team @Home
Bulletproofing servers
Golem Trust Computing Ltd.
Department of Silent Stability
The Home for Bewildered Beasts of Legend
Stormforge training grounds
Honeytech for humans

TryHackMe rooms¶

Where you filter through enough junk logs to qualify as a digital archaeologist.

SIEM TryHackMe rooms
VPN logs
ItsyBitsy
Investigating with Splunk
Benign
CaddyWiper and APT37
Zerologon

2026-04-01 20:54

© Copyright 2025, TyMyrddin.

Created using Sphinx 7.2.6. and Sphinx-Immaterial

Made with love in the Unseen University, 2025, with a forest garden fostered by /ut7