cyberred

Install and Configuration Webmail By Postfix Dovcout Opendkim Roundcube

Investigate Attack Patterns using SIEM, Sysmon Utility and MITRE ATT&CK

When conducting an investigation on a Windows machine there are 8 phase to go through, today we’ll discuss the first ‘Collecting Volatile Information’, and the rest will be explained in future topics

Active Directory Auditing Best Practices

Useful Wire shark command for threat hunting

All About Me.

Starting your first threat hunting

making a Tunnel between two VPS that one of which is in Iran and another VPS occur on a foreign country and send the traffics to a foreign data center and use free internet. with this bash script, you can make a tunnel between two servers

Lpic101_Note for beginner

13 Essential Things to Know about PowerShell Download Cradles

make valid SSL with acme

Make CA root server and Certificate for web Server with openssl Script.

DNS Incident Response

The Elastic stack (ELK) powered by Docker and Compose.

Windows Event Log Analysis & Incident Response Guide

Adversaries commonly abuse the Local Security Authority Subsystem Service (LSASS) to dump credentials for privilege escalation, data theft, and lateral movement. The process is a fruitful target for adversaries because of the sheer amount of sensitive information it stores in memory.

Apache2 Modsecurity