⭐ SOC239 – Remote Code Execution Detected in Splunk Enterprise Walkthrough (EventID: 201)
Letsdefend Alert Walkthrough
Mar 2, 20265 min read9
Command Palette
Search for a command to run...
#cybersecurity
Articles tagged with #cybersecurity
SOC168 – Whoami Command Detected in Request Body Walkthrough (EventID:118)
Letsdefend Alert Walkthrough
Feb 28, 20264 min read1
SOC169 – Possible IDOR Attack Detected Walkthrough (EventID:119)
LetsDefend Alert Walkthrough
Feb 26, 20264 min read2
SOC164 – Suspicious Mshta Behavior Walkthrough (EventID:114)
Letsdefend Alert Walkthrough
Feb 22, 20264 min read
SOC175 Walkthrough – PowerShell Found in Requested URL-Possible CVE-2022-41082 Exploitation Walkthrough (EventID:125)
Letsdefend Alert Walkthrough
Feb 21, 20265 min read12
SOC164 - Suspicious Mshta Behavior Walkthrough (EventID:114)
Letsdefend Alert Walkthrough
Feb 19, 20263 min read4