FEATURE WRITEUPS

LockBit

Analyzing disk artifacts and execution flows of the LockBit ransomware.

Disk ForensicsRansomwareMalware Analysis

NukeTheBrowser

Analyzing malicious network traffic to uncover malware delivery and exploitation.

Network AnalysisWiresharkMalware Analysis

Kerberoasted

Investigating a Kerberoasting attack, analyzing Windows Event Logs and WMI persistence mechanisms.

Threat HuntingActive DirectoryWindows Event Logs

HOMELAB DEPLOYMENTS

Homelab Architecture

Detailed architectural overview of the VMware-based cybersecurity homelab.

SplunkpfSenseOpenVPN

Infrastructure Deployment

Step-by-step guide on provisioning Splunk, setting up Windows Event logs and Sysmon for log analysis.

SplunkWindows Event LogsSysmon

Adversary Emulation (MITRE Caldera)

Simulating real-world threat actor behaviors and techniques using MITRE Caldera to validate logging and detection capabilities.

CalderaMITRE ATT&CK

Investigation and Reporting

Analyzing system telemetry, memory, and disk artifacts to investigate intrusions and document findings in formal reports.

DFIRSplunkIncident Response