If you want that your company or yourself take action against the apt groups, i have an idea for you. You can avoid being the focus of these attacks by writing YARA rules. YARA is a free and open-source tool aimed at helping security staff detect and classify malware. …

If you’re a fish in cybersecurity and haven’t heard of the volatility2 framework, don’t worry, you will soon. Participating in the incident response process is essential to becoming a cybersecurity analyst. This changes your perspective on cyber incidents and shows how weak you are from the perspective of the attacker…

If you have a free trialer account at let’s defend, the first day of every month is like Christmas for you. Because they loads 15 free investigation on your account. Follina is very interesting investigation for me. So Let’s deep dive into 0-Day investigation.

Cyberdefenders is a big opportunity for cyber security analysts. Platform has a very different rooms for investigate for cyber crimes. One of them is the elastic case room in which it gives you a server with an Elk stack deployed. Let’s deep dive into the ELK stack !! We will…

Wazuh is an agent-based endpoint security solution. It is usually included in the EDR section in the secure solutions category. It is used for file integrity, threat detection and intrusion detection. It is also a product with integration in cloud systems. It compares the hash values ​​of the determined important…

For those who haven’t read it before, I suggest you take a look at my part 1 article. https://medium.com/@orhanoztasbir/how-can-you-understand-you-hacked-189f7f9b51ca Our struggle continues to prevent attackers from harming you. If you haven’t encountered any suspicious behavior until this step, you’re lucky. …

In the age of technology we live in, most of our communication consists of computers and mobile phones. In one day, 269 billion e-mails are sent around the world, and a significant part of this is phishing, that is, harmful e-mails. So, do hackers only use this phishing method…

If you suspicious to hacked your computer and you do not have any experience about cybersecurity field, you are correct place. But since you are following my Medium account, there is no need to panic. When attacked, the attacker will likely use the powershell application for privilege escalation or lateral…

In this write up we will solve EMOTET room for malware practice. We need Volatility tool and memory dump. For install the Volatillity, chech https://github.com/volatilityfoundation/volatility page. Let’s dive the case! 1- What profile should you use for this memory sample?