#dfirlab

Deploying a Windows Logon Monitoring Dashboard Introduction On day nine, the emphasis was...

Querying Windows Events and Hunting for Brute Force Attacks Introduction Turning raw event...

Preparing Splunk Enterprise to Receive Data Introduction Configuring Splunk Enterprise to...

Integrating Splunk Cloud and Onboarding Data Introduction On the third day, the lab was...

How I prepared my toolkit and mindset for a week-long SOC and Digital Forensics...