DFIR Triage against Indirect Syscall C2 Loader

 Detailing a somewhat simple DFIR triage against a somewha complex loader (AV undetected)

MITRE T1053.005 vs Wazuh SIEM

 Just a little SOC emulation, Wazuh standard ruleset against MITRE T1053.005

Install OpenSSH server on Linux Mint

 OpenSSH on Linux Mint tutorial 💥

File Integrity with Wazuh SIEM

 

This week we quickly look at Wazuh SIEM file integrity capabilities and how to extend its detections

 

Thanks 4 watching :)