mthcht – Medium

mthcht

Published in
Detect FYI

Threat Hunting - Suspicious Named pipes

Jul 22

Threat Hunting - Suspicious Named pipes

Jul 22

Published in
Detect FYI

Event Log Manipulations - Time slipping

After reading Alex’s latest article, I’m inspired to start a detection serie dedicated to Event Log manipulation techniques, with our first…

Jan 13

Event Log Manipulations - Time slipping

Jan 13

Published in
Detect FYI

Threat Hunting — Suspicious Windows Service Names

Simulation and Detection

Jan 8

Threat Hunting — Suspicious Windows Service Names

Jan 8

Published in
Detect FYI

Threat Hunting - Suspicious User Agents

Hunting for Suspicious User Agents with Splunk

Jan 1

Threat Hunting - Suspicious User Agents

Jan 1

Published in
Detect FYI

Detecting DNS over HTTPS

Detecting DNS over HTTPS - DoH with a SIEM - logs analysis

Nov 7, 2023

Detecting DNS over HTTPS

Nov 7, 2023

Published in
Detect FYI

Threat Hunting - Suspicious TLDs

Nov 3, 2023

Threat Hunting - Suspicious TLDs

Nov 3, 2023

Published in
OSINT Team

Catching My Hacker via Leaked Databases

How i got hacked and tracked the hacker with leaked databases

Oct 4, 2023

Catching My Hacker via Leaked Databases

Oct 4, 2023

Published in
Detect FYI

Detect DLL Hijacking techniques from HijackLibs with Splunk

Splunk detections searches

Oct 1, 2023

Detect DLL Hijacking techniques from HijackLibs with Splunk

Oct 1, 2023

The Myths and Realities of VPNs

Have you also noticed the aggressive advertising campaigns for VPN providers, promoted by social media influencers and YouTube creators …

Sep 30, 2023

The Myths and Realities of VPNs

Sep 30, 2023

Published in
Detect FYI

How Threat Actors use Pastebin

Why is it important to monitor paste sites? detection tips

Aug 24, 2023

How Threat Actors use Pastebin

Aug 24, 2023

mthcht

mthcht

Threat Hunting - DFIR - Detection Engineering

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams