⭐ SOC250 – APT35 HyperScrape Data Exfiltration Tool Detected Walkthrough (EventID:212)
Letsdefend Alert Walkthrough
Mar 7, 20264 min read2
Command Palette
Search for a command to run...
#letsdefend
Articles tagged with #letsdefend
⭐ SOC173 – Follina 0-Day Detected Walkthrough (EventID:123)
Letsdefend Alert Walkthrough
Mar 4, 20264 min read1
SOC164 - Suspicious Mshta Behavior Walkthrough (EventID:114)
Letsdefend Alert Walkthrough
Feb 19, 20263 min read4
SOC163 – Suspicious Certutil.exe Usage Walkthrough (Event ID: 113)
Letsdefend Alert Walkthrough
Feb 19, 20263 min read3
⭐SOC282 – Phishing Alert: Deceptive Mail Detected Walkthrough (EventID:257)
Letsdefend Alert Walkthrough
Feb 17, 20263 min read9
SOC335 – CVE-2024-49138 Exploitation Detected Walkthough (EventID: 313)
Today we are going to investigate another LetsDefend alert:SOC335 – CVE-2024-49138 Exploitation Detected. This alert is more serious than the usual login or brute-force alerts because it involves a known vulnerability and possible exploitation on a h...
Feb 13, 20263 min read4