NetwerkLABS

Legal Disclaimer & Terms of Use – NetwerkLABS

By accessing or using this website, you agree to be bound by the following terms. If you do not agree, please discontinue use immediately. 1. Educational Purpose Only All content published on NetwerkLABS.com — including articles,…

zyberbkay

DETECT Detection Engineering

Detection Engineering: An Introduction

Detection Engineering As cybersecurity environments continue to evolve, adversaries are becoming increasingly sophisticated, making cyber threats more frequent and difficult to detect. To keep pace with this changing landscape, organizations must adopt proactive security practices and…

Bharath Narayanasamy detection_engineering

DETECT MITRE ATT&CK Detection Engineering

Using MITRE ATT&CK Navigator to Strengthen Threat Modelling [PART: II]

🎯 A Hands-On, Step-by-Step Walkthrough 📚 1. Why Map a Threat Group at All? A threat model that stops at "we might get hacked" is not much use. ATT&CK lets you say something far more specific:…

Bharath Narayanasamy

Threat Hunting DETECT Detection Engineering

8 LOLBins Every Threat Hunter Should Know

🕵️‍♂️ 8 Key LOLBins and Hunting Them with Elastic Security 🎯 Attackers love tools that are already installed, already signed and already trusted. This post walks through the eight Windows binaries that showed up most often…

Bharath Narayanasamy LOLBINs

DETECT ATTACK Detection Engineering

Living Off the Land (LOTL) Resources

🌿 Living Off the Land (LOTL) Resources 🗺️ 🎯 Attackers don't always bring their own tools. Sometimes the best weapon is already sitting on the machine. This guide walks through a well-organized collection of Living Off…

Bharath Narayanasamy LOLBINs, LOTL

DETECT DFIR

Volatility3: Memory Forensics Cheatsheet

VOLATILITY 3 Memory Forensics Investigation Cheatsheet DFIR | Detection Engineering | Threat Hunting | CyberDefenders Labs 01 │ SETUP & FUNDAMENTALS # Install via pip pip install volatility3 # Or clone from GitHub git clone https://github.com/volatilityfoundation/volatility3.git…

Bharath Narayanasamy Volatility

DETECT Purple Teaming Detection Engineering

Misbehaving binaries: Hunting LOLBins

🕵️‍♂️ Detection Engineering: Catching jsc.exe Abuse (T1127) 🟣 Technique: Trusted Developer Utilities Proxy Execution (MITRE ATT&CK T1127)🔵 Tool abused: jsc.exe, the Microsoft JScript .NET compiler🟢 Stack: Atomic Red Team ➜ Sysmon ➜ Elastic Agent ➜ Elastic…

Bharath Narayanasamy LOLBINs

MITRE ATT&CK Purple Teaming Threat Hunting

Using MITRE ATT&CK Navigator to Strengthen Threat Modelling [PART: I]

Getting More Out of MITRE ATT&CK in Threat Modelling MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is an openly available knowledge base describing how cyber adversaries behave. The MITRE Corporation maintains it. Organisations use it…

Bharath Narayanasamy MITRE, ATT&CK

DETECT Purple Teaming

Testing Your Defences: TTP Simulation with Atomic Red Team

Every organisation with a SIEM, an EDR agent and an identity platform believes it would notice an attack. Few have checked. Atomic Red Team is a free, community-maintained set of short scripts that lets you check.…

Bharath Narayanasamy caldera

DEFEND Vulnerability Management

Stakeholder-Specific Vulnerability Categorization

Stop Patching by CVSS Score: A Practical Guide to CISA's SSVC Decision Tree | NetwerkLABS NetwerkLABS | AD² = ATTACK. DETECT. DEFEND. Stop patching by CVSS score: a practical guide to CISA's SSVC decision tree Five…

Bharath Narayanasamy vuln mgmt

GRC

NIS2 to ISO 27001:2022 Mapping Table

Complete Control Mapping for Belgian Organizations This comprehensive mapping shows how ISO 27001:2022 controls align with NIS2 Directive requirements, helping organizations leverage existing ISMS implementations for NIS2 compliance. Risk Management Measures 1. Policies on Risk Analysis…

Bharath Narayanasamy NIS2