This article provides my approach for solving the Qradar101 blue team ctf challenge on the CyberDefenders website, a blue team-focused challenge that requires you to investigate an incident related to a financial company using the QRadar SIEM and reconstruct the events carried out by the attacker. Disclaimer I like to add…

Introduction After recently passing the Practical Junior Malware Researcher (PJMR) Certification provided by TCM Security, I decided to create this short article to share my experience with the training material and the exam. …

This article provides my approach to analyzing a bonus ransomware binary as part of the Practical Malware Analysis & Triage (PMAT) course provided through TCM Security. The ransomware was analyzed using both static and dynamic analysis techniques with tools installed on FlareVm. Disclaimer I would like to add a brief disclaimer…

This article provides my approach to analyzing a bonus malware binary as part of the Practical Malware Analysis & Triage (PMAT) course provided through TCM Security. The malware was analyzed using basic static and dynamic analysis techniques with tools installed on FlareVm. Disclaimer I would like to add a brief disclaimer…

Introduction After recently passing the Splunk Core Certified User (SPLK-1001) certification, I decided to continue my studies and prepare for the Splunk Core Certified Power User (SPLK-1002) certification. I wanted to continue to build on my knowledge of Splunk fundamentals and learn more about Splunk features. I have created this short…

Introduction Recently, I have been working a lot within Splunk environments but, despite having completed multiple certifications, training and security challenges that involved Splunk, I had yet to acquire any certifications from Splunk itself. In light of this, I recently studied for and passed the Splunk Core Certified User (SPLK-1001) certification…

This article provides my approach for solving the Bucket CTF challenge created by Scott Piper on the CyberDefenders website, a blue team-focused challenge that requires you to analyze a copy of AWS cloud trail logs and spot the misconfigurations that allowed a successful compromise to occur. Disclaimer I like to add…

Introduction Recently, I passed the Practical Network Penetration Tester (PNPT) certification exam provided by TCM Security. I have created this short article to help anyone who is considering on studying for the PNPT exam and to share my experience with the course. …

If you spend enough time in or around the cyber security industry, you will often hear the term “cyber security framework” mentioned. In this article, I will be briefly covering several common cyber security detection frameworks used by organizations to help understand adversary behavior during a cyber-attack. What is a Cyber Security Framework? A cyber security…