Whoami
Footprinting Labs
Shells & Payloads
- The Live Engagement
Password Attacks
Active Directory Enumeration & Attacks
SOC Hackthebox Notes & Labs
Malicious Document Analysis - HTB Notes
Build Home Lab - SOC Automation
Home Lab (Attack & Defense Scenarios)
Home Lab (Active Directory Scenarios)
- AD Scenario 1
Build ELK Lab
- Configure Elasticsearch and Kibana setup in ubuntu
- Configure Fluent-Bit to send logs to ELK
- Set up Winlogbeat & Filebeat for log collection
- Send Logs from Winlogbeat through Logstash to ELK
- Enable Windows Audit Policy & Winlogbeat
- Elasticsearch API and Ingestion Pipeline
CyberDefenders
TryHackme Rooms
Powershell Scripting Fundamentals
Practical Windows Forensics
- Data Collection
- Examination
- Disk Analysis Introduction
- User Behavior
- Overview of disk structures, partitions and file systems
- Finding Evidence of Deleted Files with USN Journal Analysis
- Analyzing Evidence of Program Execution
- Finding Evidence of Persistence Mechanisms
- Uncover Malicious Activity with Windows Event Log Analysis
- Windows Memory Forensic Analysis
Hackthebox Rooms
WEInnovate Training
- Weinnovate - Active Directory Task One
- Build ELK Lab
  - Configure Elasticsearch and Kibana setup in ubuntu
  - Configure Fluent-Bit to send logs to ELK
  - Set up Winlogbeat & Filebeat for log collection
  - Send Logs from Winlogbeat through Logstash to ELK
  - Enable Windows Audit Policy & Winlogbeat
  - Elasticsearch API and Ingestion Pipeline
- SOAR
  - Send Alerts To Email & Telegram Bot
  - Integrate Tines with ELK
- SOC Practical Assessment
- Lumma C2
- Network Analysis
TryHackme SOC 1
TryHackme SOC 2

Powered by GitBook

On this page

SANS SEC504 & Labs

Book Three

CtrlK