Here is my write-up on Task 6 of the Brim room. This was an exercise looking at a C2 detection from CobaltStrike. Head over to Medium or my website to check it out!!!

#TryHackMe #Brim #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-brim-task-6-exercise-threat-hunting-with-brim-malware-c2-detection-ea94926f577d

https://haircutfish.com

Here is my latest write-up for the Brim room on TryHackMe, this is finishing up before the exercise sections. Check out this awesome write-up on both medium and my website!!!

#TryHackMe #Brim #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-brim-task-4-default-queries-task-5-use-cases-cd31926a1905

Here is the start of the Brim room, Tasks 1 thru 3, in these tasks you get to learn the fundamentals of the program. Then in the 3rd task you get to get you hands wet by using Brim, a pretty awesome tool!! Make sure you check out my write-up on it on Medium and my website!!!

#TryHackMe #Brim #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-brim-task-1-introduction-task-2-what-is-brim-task-3-the-basics-32772c13d8c2

Finishing off the Zeek Exercise room today, I got to work with zeek on phishing and log4j. I've said it once and will say it again, I love to work in the command line. Make sure you check out my write-up on medium and on my website in a little bit!!!!

#TryHackMe #Zeek #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-zeek-exercises-task-3-phishing-task-4-log4j-task-5-conclusion-de684862d8e6

Starting with the Zeek Exercise room today, using a lot of Commandline Kung-Fu to discover the information needed for the question to answer them. Great follow-up room!!! Write-up on the tasks 1 and 2 are on Medium and will be on my website later today, go check them out!!!

#TryHackMe #Zeek #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-zeek-exercises-task-1-introduction-task-2-anomalous-dns-3a0baa1df1e8

Finished off the Zeek room!!! Lot's of Zeek-cut and Command Line Kung-fu, awesome time!!!! You need to check out this room out, if you haven't!!! Amazing room, check out my write-up on medium, then later today on my website!!
#TryHackMe #Zeek #SocLevelOnePath
https://medium.com/@haircutfish/tryhackme-zeek-task-7-zeek-scripts-scripts-and-signatures-task-8-zeek-scripts-frameworks-1bbab9f9be74

Finished off the Zeek room!!! Lot's of Zeek-cut and Command Line Kung-fu, awesome time!!!! You need to check out this room out, if you haven't!!! Amazing room, check out my write-up on medium, then later today on my website!!
#TryHackMe #Zeek #SocLevelOnePath

Today we have more on Zeek!!! This time we learn about Zeek signatures and scripts, and running a lot of zeek-cut with piping!! I LOVE IT!! Definitely a room that you need to check out!! The write-up is posted on medium, and will be up on my website later today!!

#TryHackMe #Zeek #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-zeek-task-4-cli-kung-fu-recall-processing-zeek-logs-task-5-zeek-signatures-task-6-2aa827e24a41

Starting off the week with the Zeek room!! When I get to work in the command line is always a good day!! In this room I start to learn about Zeek and Zeek cut. Head over to medium and check out my write-up on Task 1 through 3!!

#TryHackMe #Zeek #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-zeek-task-1-introduction-task-2-network-security-monitoring-and-zeek-task-3-zeek-929215235259

Finishing off the NetworkMiner room, this practical takes everything you have learned so far and putting it into researching/looking for the current information in the pcap file. Awesome tool for parsing smaller pcap files and getting some basic knowledge. Check out my write-up on the topic on medium!!!

#TryHackMe #NetworkMiner #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-networkminer-task-7-exercises-task-8-conclusion-cd44742d65e1

In today's NetworkMiner room Tasks, learned a little more about the different menu tabs. Also, about the features of the different versions. So that you have a good grasp of the tool you are using. Check out my write-up on the Tasks 5 & 6 over on medium!!

#TryHackme #NetworkMiner #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-networkminer-task-5-tool-overview-2-task-6-version-differences-2de1f0cc4270

Starting the NetworkMiner room, and learning about a new tool to help parse smaller pcap files. Pretty neat little tool, able to pulls some great information!!! Make sure you check this out along with my write-up on the first four tasks!!!!

#TryHackMe #NetworkMiner #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-networkminer-task-1-through-task-4-527779fb49b7

Here is the write-up for the Snort Challenge - Live Attack Room. This was so much fun to do!!! First looking at the live traffic, then gaining information that you use to create a rule to block malicious traffic. This was so interesting, head over to medium and check out my write-up on the room!!

#TryHackMe #Snort #SocLevelOnePath

https://medium.com/@haircutfish/snort-challenge-live-attacks-room-f65858077692

Finishing off the Snort Challenge Basics room with creating a Snort rule to detect Log4j. I loved this room and can't wait to start the next one!!! Make sure you check out this room, and my write-up on it!!!!

#TryHackMe #Snort #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-snort-challenge-the-basics-task-8-using-external-rules-log4j-task-9-conclusion-30eb99b7454d

Today's task was fixing syntax errors in Snort rules. This was fun to look over, and make the fixes. As you make the fixes, you really understand what you've been working on and have the sense of knowing you are learning Snort rules and getting better at them!! So head over to my medium and check out my write-up on the task!!

#TryHackMe #Snort #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-snort-challenge-the-basics-task-6-troubleshooting-rule-syntax-errors-a23e72ff8bf1

Here is Task 4 & 5 of the Snort Basic Challenge room. This time got to write rules for PNG, GIF, and Torrent files. Then do some investigation of them. Super fun stuff, make sure you check it out if you haven't yet!!

#TryHackMe #Snort #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-snort-challenge-the-basics-task-4-writing-ids-rules-png-task-5-writing-ids-rules-16bc16c31e51

Here is the first of what will definitely be a couple of write-ups on the Snort challenge basics room. A lot of writing but, as you go through it you do a lot of repetitive things like clear the logs, and making changes / building upon rules you have created. I loved it!!!! Helps to drill in and drive home the teaching, so you learn and know it!!!!. Make sure you do this room after the Snort room!!! Don't forget to check out my write-up on the first three tasks on medium as well!!

#TryHackMe #SnortChallengeBasics #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-snort-challenge-the-basics-task-1-introduction-task-2-writing-ids-rules-http-b8ec9348452

Here it is, after countless time putting in the work, the finished Snort room write-up!!! Today I got to get my hands on writing Snort rules, which was a challenge but once you start to figure it out it really isn't to difficult. So if you haven't checked out this room yet do yourself a favor and do so!!!! Don't forget to check out my write-up on it as well!!

#TryHackMe #Snort #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-snort-task-9-snort-rule-structure-task-10-snort2-operation-logic-points-to-remember-fda26065c7f3

Today, got to get my hands even dirtier in the Snort command line and output!!! To start off, learned about the IDS/IPS mode, then worked with pcap files. Truly Awesome, if you have the time and haven't yet go check out this room!!! While your at it, check out my write-up as well!!!

#TryHackMe #Snort #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-snort-task-7-operation-mode-3-ids-ips-task-8-operation-mode-4-pcap-investigation-f70f91fc76b9

Today I really got my hands dirty with Snort, and I liked it!!!! Such a fun and interesting tool, granted anytime I get to work in the command line is a fun and interesting time. Make sure you go check out my write-up on analyzing some snort logs!!!

#TryHackMe #Snort #SocLevelOnePath

https://medium.com/@haircutfish/tryhackme-snort-task-4-first-interaction-with-snort-task-5-operation-mode-1-sniffer-mode-69952d93b1af