May 2024 – NetwerkLABS

DETECT wazuh

Wazuh: Detecting Web Attacks

Bharath Narayanasamy wazuh

DETECT wazuh

Ingesting OPNsense logs into Wazuh SIEM

Bharath Narayanasamy

RED TEAM

THREAT EMULATION: Introduction

Purpose of Threat Emulation Threat emulation is meant to assist security teams and organisations, in general, in better understanding their security posture and their defence mechanisms and performing due diligence in their compliance. Are our people…

Bharath Narayanasamy BAS, THreat, Emulation

ZyberAttacks

Decoding

Most commonly used text encoding methods: base64 hex rot13 Base64 Identifying Base64: base64 encoded strings are easily spotted since they only contain alpha-numeric characters. However, the most distinctive feature of base64 is its padding using = characters. The length of base64 encoded strings…

Bharath Narayanasamy decode, encode

Threat Detection and Incident Response Intrusion Detection and Response

Code Obfuscation and Deobfuscation

Code Obfuscation is a technique used to make a script more difficult to read by humans but allows it to function the same from a technical point of view, though performance may be slower. This is…

Bharath Narayanasamy dfir, Code

DFIR VulnLAB Threat Detection and Incident Response

Incident Response

Incident response, also known as incident handling, is a cyber security function that uses various methodologies, tools and techniques to detect and manage adversarial attacks while minimizing impact, recovery time and total operating costs. Addressing attacks…

Bharath Narayanasamy dfir, IR, Incident

ZyberAttacks Threat Hunting Threat Intelligence

Remote Monitoring and Management software used in phishing attacks

RMM software used in phishing attacks Remote Monitoring & Management (RMM) software, including popular tools like AnyDesk, Atera, and Splashtop, are invaluable for IT administrators today, streamlining tasks and ensuring network integrity from afar. However, these…

Bharath Narayanasamy