Media Summary: In this Let's Defend SOC investigation, we analyze a confirmed phishing interaction where a user submitted data to a malicious ... SOC-style investigation of a phishing email alert from the SOC-style investigation of a phishing alert involving a malicious email attachment from the

Letsdefend Soc275 Application Token Steal - Detailed Analysis & Overview

In this Let's Defend SOC investigation, we analyze a confirmed phishing interaction where a user submitted data to a malicious ... SOC-style investigation of a phishing email alert from the SOC-style investigation of a phishing alert involving a malicious email attachment from the SOC-style investigation of a phishing URL alert from the Adversary-in-the-Middle (AitM) attacks are one of the most dangerous ways threat actors bypass MFA and hijack accounts, without ... Day 111 of Becoming a SOC Analyst — SOC117 Suspicious .reg File (True Positive) config.reg triggered the alert on host Aldo ...

Looking to gain hands-on experience as a SOC analyst? In this video, we explore

Photo Gallery

LetsDefend SOC275: Application Token Steal Attempt Detected | EventID 250
SA - SOC275 EventID: 250 - Application Token Steal Attempt Detected
Phishing Reset Link Leads to Credential Theft | Let’s Defend SOC275 Investigation
SOC Investigation – Phishing Mail Detected (Suspicious Task Scheduler) (LetsDefend SOC140)
SOC Investigation – Malicious Attachment Detected (Phishing Alert) (LetsDefend SOC114)
SOC Investigation – Phishing URL Detected (LetsDefend SOC141)
How Adversary-in-the-Middle (AitM) Attacks Steal Session Tokens & Bypass MFA
LetsDefend.io - SOC142 Walkthrough
Suspicious .reg File - Batch Worm Hidden in Zip, Defender & Firewall Disabled | LetsDefend SOC117
Gain SOC Experience with LetsDefend
View Detailed Profile
LetsDefend SOC275: Application Token Steal Attempt Detected | EventID 250

LetsDefend SOC275: Application Token Steal Attempt Detected | EventID 250

Dive into

SA - SOC275 EventID: 250 - Application Token Steal Attempt Detected

SA - SOC275 EventID: 250 - Application Token Steal Attempt Detected

Today we tackle a MEDIUM alert on the

Phishing Reset Link Leads to Credential Theft | Let’s Defend SOC275 Investigation

Phishing Reset Link Leads to Credential Theft | Let’s Defend SOC275 Investigation

In this Let's Defend SOC investigation, we analyze a confirmed phishing interaction where a user submitted data to a malicious ...

SOC Investigation – Phishing Mail Detected (Suspicious Task Scheduler) (LetsDefend SOC140)

SOC Investigation – Phishing Mail Detected (Suspicious Task Scheduler) (LetsDefend SOC140)

SOC-style investigation of a phishing email alert from the

SOC Investigation – Malicious Attachment Detected (Phishing Alert) (LetsDefend SOC114)

SOC Investigation – Malicious Attachment Detected (Phishing Alert) (LetsDefend SOC114)

SOC-style investigation of a phishing alert involving a malicious email attachment from the

SOC Investigation – Phishing URL Detected (LetsDefend SOC141)

SOC Investigation – Phishing URL Detected (LetsDefend SOC141)

SOC-style investigation of a phishing URL alert from the

How Adversary-in-the-Middle (AitM) Attacks Steal Session Tokens & Bypass MFA

How Adversary-in-the-Middle (AitM) Attacks Steal Session Tokens & Bypass MFA

Adversary-in-the-Middle (AitM) attacks are one of the most dangerous ways threat actors bypass MFA and hijack accounts, without ...

LetsDefend.io - SOC142 Walkthrough

LetsDefend.io - SOC142 Walkthrough

Today I analyzed the alert SOC142 on

Suspicious .reg File - Batch Worm Hidden in Zip, Defender & Firewall Disabled | LetsDefend SOC117

Suspicious .reg File - Batch Worm Hidden in Zip, Defender & Firewall Disabled | LetsDefend SOC117

Day 111 of Becoming a SOC Analyst — SOC117 Suspicious .reg File (True Positive) config.reg triggered the alert on host Aldo ...

Gain SOC Experience with LetsDefend

Gain SOC Experience with LetsDefend

Looking to gain hands-on experience as a SOC analyst? In this video, we explore