Purple Teaming – NetwerkLABS

Detection Engineering DETECT Purple Teaming

Misbehaving binaries: Hunting LOLBins

🕵️‍♂️ Detection Engineering: Catching jsc.exe Abuse (T1127) 🟣 Technique: Trusted Developer Utilities Proxy Execution (MITRE ATT&CK T1127)🔵 Tool abused: jsc.exe, the Microsoft JScript .NET compiler🟢 Stack: Atomic Red Team ➜ Sysmon ➜ Elastic Agent ➜ Elastic…

Bharath Narayanasamy LOLBINs

Threat Hunting DETECT MITRE ATT&CK

Using MITRE ATT&CK Navigator to Strengthen Threat Modelling [PART: I]

Getting More Out of MITRE ATT&CK in Threat Modelling MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is an openly available knowledge base describing how cyber adversaries behave. The MITRE Corporation maintains it. Organisations use it…

Bharath Narayanasamy MITRE, ATT&CK

Purple Teaming DETECT

Testing Your Defences: TTP Simulation with Atomic Red Team

Every organisation with a SIEM, an EDR agent and an identity platform believes it would notice an attack. Few have checked. Atomic Red Team is a free, community-maintained set of short scripts that lets you check.…

Bharath Narayanasamy caldera

VulnLAB RED TEAM Purple Teaming

Nmap Cheat Sheet

Nmap Cheat Sheet nmap — cheat sheet Network Mapper · Comprehensive Command Reference 🎯 Target Specification 8 nmap 192.168.1.1·Scan a single IP nmap 192.168.1.1-254·Scan IP range nmap 192.168.1.0/24·Scan CIDR subnet nmap 10.0.0.1 10.0.0.2·Scan multiple IPs nmap…

Bharath Narayanasamy

CyBER Tools Purple Teaming

Atomic Red Team — Adversary Simulation and Detection

Full Kill Chain Simulation + Splunk Detection Dashboard Operation Silent Ledger | Northbridge Financial APT SimulationPurple Team Playbook: ART Execution → Splunk Detection → Custom Dashboard 🗺️ Kill Chain Map — Techniques We'll Simulate Kill Chain…

Bharath Narayanasamy splunk, detection_engineering, Atomic RED

RED TEAM Purple Teaming ATTACK

Caldera: Simulating a Complete Attack Chain

Attack Simulation In this blog post, we will explain the options to customise the Caldera framework and emulate an attack chain that traverses from Initial Access to Achieving the Objective. Before continuing further, please refer this…

Bharath Narayanasamy Elastic, wazuh, caldera, ELK

Purple Teaming ATTACK RED TEAM

Atomic Red Team – A Framework for Threat Emulation: PART II

This is the PART II article in the Atomic RED series. Please follow this link to read PART I of the series. Listing Atomic Techniques We can use the parameters - ShowDetailsBrief and ShowDetails that provide the details inside…

Bharath Narayanasamy Atomic RED

RED TEAM Purple Teaming ATTACK

Atomic Red Team – A Framework for Threat Emulation: PART I

Overview What is Atomic Red Atomic Red Team is an open-source framework designed for security testing and threat emulation. It allows security professionals to simulate real-world cyberattacks and assess the effectiveness of security controls and incident…

Bharath Narayanasamy Atomic RED

wazuh Purple Teaming Detection Engineering

Operationalizing Security: CALDERA Meets WAZUH (PART II)

Adversary emulation with Caldera and Wazuh Please visit here to read PART I of this series, which explains the Caldera setup and Windows agent installation. Agent setup Deploy Agents on Linux machines Now, the lab consists…

Bharath Narayanasamy wazuh, caldera

Web Pentest Detection Engineering DETECT

Wazuh: Detecting Web Attacks

Bharath Narayanasamy wazuh