NetwerkLABS

Caldera: Simulating a Complete Attack Chain

Attack Simulation In this blog post, we will explain the options to customise the Caldera framework and emulate an attack chain that traverses from Initial Access to Achieving the Objective. Before continuing further, please refer this…

Bharath Narayanasamy Elastic, wazuh, caldera, ELK

RED TEAM

Installing Caldera on ParrotOS: A Smoother Experience Compared to Ubuntu and Kali Linux

Introduction MITRE Caldera is a powerful adversary emulation platform used for cybersecurity testing and red teaming. However, recent attempts to install Caldera on Ubuntu and Kali Linux have been met with issues—primarily due to the newer…

Bharath Narayanasamy caldera, parrotOS

SOC Analyst BLUE TEAM Vulnerability Scanning

Vulnerability Management: FARADAY

Faraday: Open Source Vulnerability Manager Faraday is a powerful open-source vulnerability management platform designed to help cybersecurity teams streamline their pentesting, vulnerability assessment, and remediation processes. Built with a collaborative and automation-driven approach, Faraday enables security…

Bharath Narayanasamy faraday, vuln

RED TEAM

Atomic Red Team – A Framework for Threat Emulation: PART II

This is the PART II article in the Atomic RED series. Please follow this link to read PART I of the series. Listing Atomic Techniques We can use the parameters - ShowDetailsBrief and ShowDetails that provide the details inside…

Bharath Narayanasamy Atomic RED

RED TEAM

Atomic Red Team – A Framework for Threat Emulation: PART I

Overview What is Atomic Red Atomic Red Team is an open-source framework designed for security testing and threat emulation. It allows security professionals to simulate real-world cyberattacks and assess the effectiveness of security controls and incident…

Bharath Narayanasamy Atomic RED

Splunk Splunk Basics

Data Manipulation in Splunk: PART II

Event Boundaries Event breaking in Splunk refers to breaking raw data into individual events based on specified boundaries. Splunk uses event-breaking rules to identify where one event ends, and the next begins. In the PART I of this series, we…

Bharath Narayanasamy splunk

Splunk Splunk Basics

Data Manipulation in Splunk: PART I

Splunk Log Parsing and Transformation Configuration Splunk needs to be properly configured to parse and transform the logs appropriately. Some of the issues being highlighted are: Event Breaking: Ensure Splunk correctly breaks events for proper indexing…

Bharath Narayanasamy splunk

Threat Hunting SOC Analyst Splunk

Regular Expressions

Regular Expressions: Charsets Searching for Specific Strings Use grep 'string' <file> to search for an exact match. To find patterns rather than exact strings, Regular Expressions (regex) are used. Charsets in Regex Definition: Enclosed in […

Bharath Narayanasamy splunk

Attacking Active Directory Active Directory

Active Directory Domain Service (AD DS)

Overview AD DS acts as a catalog for all objects in a network (users, groups, machines, printers, etc.). Some objects, such as users and machines, are security principals, meaning they can be authenticated and assigned privileges.…

Bharath Narayanasamy AD attacks

GRC

GRC 101: SimpleRisk Core (Community Edition)

What is SimpleRisk CORE (Community Edition)? SimpleRisk CORE (Community Edition) is an open-source Governance, Risk, and Compliance (GRC) tool designed to help organizations identify, assess, and manage risks effectively. It provides a structured framework for risk…

Bharath Narayanasamy GRC, SimpleRisk