NobisD

Full network investigation in an Active Directory environment. Detecting initial access, lateral movement, and more.

Introduction to network DFIR using Zeek and JupyterLab

Hijacking a Microsoft protocol to turn it into a backdoor? In this article, focused on the Microsoft ecosystem, we'll see how to implement it and then detect …