PinnedCreate Symantec Endpoint Protection Custom IPS RuleIf you use Symantec Endpoint Protection you may need custom IPS rule for prevent your endpoints from attackers. SEP client has default IPS rules. SEP IPS following your endpoint package traffic and review for threats according to their rules. These custom rules are packet-based . Packet-based signatures examine a single…Intrusion Prevention3 min readIntrusion Prevention3 min read
PinnedWhat is going on at background when connect to any website ?That’s right. You got it right. I’m gonna explain what is going on at background when connect this Medium website. If you eager about Cyber Security or Network Administration fields you have to learn how it works web. This article can be little long. …Cybersecurity5 min readCybersecurity5 min read
PinnedMr. Gamer Write Up (Cyberdefenders.org)We are solving Mr. Gamer room today. This room include linux forensic and little bit gaming. Let’s dive to Mr. Gamer room. I used autopsy tool for this investigation. #1 I use print statements for my logging -> What is the name of the utility/library the user was looking at exploits…3 min read3 min read
PinnedIf you see this PowerShell Commands on your pc, sorry you probably got hackedIf you suspicious to hacked your computer and you do not have any experience about cybersecurity field, you are correct place. But since you are following my Medium account, there is no need to panic. When attacked, the attacker will likely use the powershell application for privilege escalation or lateral…Cybersecurity3 min readCybersecurity3 min read
PinnedGolden Ticket Attack Explaining ( From The Blue Team Perspective)If you want to be a king, you must wear a crown. If you want to be the king of a network, then you need a Golden Ticket. With the Golden Ticket attack, the attacker can exploit a vulnerability in Kerberos to give the Domain Controller machine the impression of…Cybersecurity4 min readCybersecurity4 min read
May 5Invisible Intruders: The Rise of Fileless MalwareFileless Malware: The Stealthy Threat That’s Hard to Detect In the world of cybersecurity, malwares are permanently evolving. We will get the bottom of Filess Malware in this article. Let’s do this. One such threat that has been gaining attantion in recent years is fileless malware. Unlike traditional malware that…Cybersecurity3 min readCybersecurity3 min read
Jul 5, 2022Fantastic.71BMoe (Brad Moore)Thanks for your response.Thanks for your response. This kind of comments is giving to me motivation. Good luck to you and your team.1 min read1 min read
Jun 29, 2022Is Windows Defender Bullshit ?Have you ever been blocked by Windows Defender while downloading a file from a website that you think is a reliable source? In such cases one thinks “This Windows Defender is bullshit”. Well, is it really so? What is Windows Defender ? Formerly known as Microsoft AntiSpyware and Windows Defender, the software was originally based…Cybersecurity3 min readCybersecurity3 min read
Jun 26, 2022Collect Windows logs with WinlogbeatAccording to the 2022 report of Operating System Market Share Worldwide, the most used operating system in the world is still windows with 29 percent. According to the report of the Statista website, the most malicious software in 2020 was written for the windows operating system with a rate of…Cybersecurity2 min readCybersecurity2 min read
Jun 10, 2022Write Your First YARA RuleIf you want that your company or yourself take action against the apt groups, i have an idea for you. You can avoid being the focus of these attacks by writing YARA rules. YARA is a free and open-source tool aimed at helping security staff detect and classify malware. …Cybersecurity2 min readCybersecurity2 min read
