The Big Data Blog

Aryan Ahirwar

Dec 18, 20201 min read

RED TEAMING

Credential Dumping: Windows Autologon Password

Aryan Ahirwar

Nov 18, 20204 min read

RED TEAMING

DNScat2: Application Layer C&C

Aryan Ahirwar

Nov 18, 20205 min read

RED TEAMING

AlienVault: Threat Hunting/Network Analysis

Aryan Ahirwar

Oct 23, 20204 min read

RED TEAMING

AlienVault: OSSEC (IDS) Deployment

Aryan Ahirwar

Oct 13, 20205 min read

RED TEAMING

AlienVault: End user Devices Integration-Lab Setup (Part 2)

Aryan Ahirwar

Oct 12, 20206 min read

RED TEAMING

SIEM Lab Setup: AlienVault

Aryan Ahirwar

Oct 10, 20204 min read

RED TEAMING

Defense Evasion with obfuscated Empire

Aryan Ahirwar

Sep 26, 20207 min read

RED TEAMING

Threat Hunting: Velociraptor for Endpoint Monitoring (Part 2)

Aryan Ahirwar

Sep 14, 20203 min read

RED TEAMING

Docker for Pentester: Abusing Docker API

Aryan Ahirwar

Sep 8, 20206 min read

RED TEAMING

SIEM: Windows Client Monitoring with Splunk

Aryan Ahirwar

Sep 3, 20207 min read

RED TEAMING

Data Exfiltration using Linux Binaries

Aryan Ahirwar

Sep 3, 20204 min read

RED TEAMING

Incident Response: Windows Account Logon and logon Events

Aryan Ahirwar

Sep 2, 20206 min read

RED TEAMING

Threat Hunting: Velociraptor for Endpoint Monitoring

Aryan Ahirwar

Aug 29, 20203 min read

RED TEAMING

Incident Response: Windows Account Management Event (Part 2)

Aryan Ahirwar

Aug 29, 20204 min read

RED TEAMING

Incident Response: Windows Account Management Event (Part 1)

Aryan Ahirwar

Aug 26, 20206 min read

RED TEAMING

Defense Evasion: Alternate Data Streams

Aryan Ahirwar

Aug 26, 20206 min read

RED TEAMING

SIEM: Log Monitoring Lab Setup with Splunk

Aryan Ahirwar

Aug 23, 20207 min read

RED TEAMING

Credential Dumping: Fake Services

Aryan Ahirwar

Aug 21, 20205 min read

RED TEAMING

Incident Response- Linux Cheatsheet

Aryan Ahirwar

Aug 20, 20206 min read

RED TEAMING

The Big Data Blog

Credential Dumping: Windows Autologon Password

DNScat2: Application Layer C&C

AlienVault: Threat Hunting/Network Analysis

AlienVault: OSSEC (IDS) Deployment

AlienVault: End user Devices Integration-Lab Setup (Part 2)

SIEM Lab Setup: AlienVault

Defense Evasion with obfuscated Empire

Threat Hunting: Velociraptor for Endpoint Monitoring (Part 2)

Docker for Pentester: Abusing Docker API

SIEM: Windows Client Monitoring with Splunk

Data Exfiltration using Linux Binaries

Incident Response: Windows Account Logon and logon Events

Threat Hunting: Velociraptor for Endpoint Monitoring

Incident Response: Windows Account Management Event (Part 2)

Incident Response: Windows Account Management Event (Part 1)

Defense Evasion: Alternate Data Streams

SIEM: Log Monitoring Lab Setup with Splunk

Credential Dumping: Fake Services

Incident Response- Linux Cheatsheet

Threat Intelligence: MISP Lab Setup

Stay Updated