Filtered View
Tag: #dfir
4 posts
HTB Sherlock: CrownJewel-1
VSS, an NTDS.dit copy, and four artifacts to piece it together. My quick notes from CrownJewel-1.
HTB Sherlock: OpTinselTrace-3
A suspicious Christmas gift, Volatility, and PowerShell logs. The bits I kept from OpTinselTrace-3.
HTB Sherlocks: Notes from the Blue Team Grind
Quick notes from 12 Sherlocks: useful artifacts, little gotchas, and things to remember for the next lab.
My 10-Week HTB Sherlocks Blue Team Roadmap
A practical 10-week HTB Sherlocks roadmap for SOC, DFIR, Blue Team, Purple Team, malware triage, cloud IR, threat intel, and interview prep.