The Get-WinEvent cmdlet is an essential PowerShell tool for querying Windows Event Logs at scale. It will make your job much easier by letting you search through all kinds of logs, from the familia...
Windows Event Logs are a rich source of information for monitoring system activity and detecting malicious behavior. They can provide you invaluable visibility into what’s happening under the hood ...
In network analysis, delta time is simply the difference in time between packets, that is, the time that passes between one packet and the one just before it. Delta time can help you analyze delay...
Port scanning is a common technique used by adversaries and security teams to identify open ports and services on a network device. The goal is to discover vulnerabilities on a target system. In th...
During this challenge, you’ll use Wireshark and the terminal to investigates the extent of a brute-force attack carried out by an adversary. You’ll have to use all the your knowledge and skills you...
A proxy server is a dedicated server that sits between a client and a destination. The destination can be either a public-facing endpoint (such as a web server or cloud service) or a private networ...
In this article, I’ll walk you through how to solve each question from the Introduction to Windows Command Line Skills assessment section. However, I strongly encourage you to try solving them on y...
After meticulously reading the many different web attacks a web application may face according to letsDefend.io, I was completely overwhelmed when I was faced with a log file containing more than 1...
During this investigation you’ll be gathering information about the client and server. To do so, you’ll work with a provided .pcap file to help answer the following questions. Without further ado, ...
In the realm of functional programming there is an old and well-known principle called data flattening. If you’re like me, hearing this concept for the first time, you might envision someone jumpin...