Popular repositories Loading

1. Tempest-Incident-Response Tempest-Incident-Response Public

   DFIR investigation of a compromised Windows workstation using Sysmon, Windows Event Logs, Wireshark and network traffic analysis.

2. TryHackMe-Boogeyman-3 TryHackMe-Boogeyman-3 Public

   Enterprise DFIR investigation involving phishing, persistence, UAC bypass, credential dumping, lateral movement and ransomware activity using Elastic SIEM.