<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>SIEM on JO's USB</title><link>https://josusb.com/tags/siem/</link><description>Recent content in SIEM on JO's USB</description><generator>Hugo -- gohugo.io</generator><copyright>Copyright © 2021-2024 JO. All Rights Reserved.</copyright><lastBuildDate>Sat, 25 May 2024 00:00:00 +0000</lastBuildDate><atom:link href="https://josusb.com/tags/siem/index.xml" rel="self" type="application/rss+xml"/><item><title>CTF Guide: Benign</title><link>https://josusb.com/blog/ctf-benign/</link><pubDate>Sat, 25 May 2024 00:00:00 +0000</pubDate><guid>https://josusb.com/blog/ctf-benign/</guid><description>&lt;p>This
&lt;span class="dictionary" data-text="Capture The Flag refers to finding hidden messages (flags) on a computer network as a challenge. Finding flags usually requires some form of hacking. Popular CTF platforms include Hack The Box &amp;amp; TryHackMe.">CTF&lt;/span>
is part of the &lt;a href="https://tryhackme.com/path/outline/soclevel1" target="_blank" rel="noopener noreferrer">SOC Level 1&lt;i class="fas fa-external-link-square-alt ms-1">&lt;/i>&lt;/a>
learning path on TryHackMe. You are tasked to investigate a compromised
corporate system using limited Splunk logs.&lt;/p></description></item><item><title>CTF Guide: Hunt Me II - Typo Squatters</title><link>https://josusb.com/blog/ctf-huntme-ii/</link><pubDate>Mon, 13 May 2024 00:00:00 +0000</pubDate><guid>https://josusb.com/blog/ctf-huntme-ii/</guid><description>&lt;p>This
&lt;span class="dictionary" data-text="Capture The Flag refers to finding hidden messages (flags) on a computer network as a challenge. Finding flags usually requires some form of hacking. Popular CTF platforms include Hack The Box &amp;amp; TryHackMe.">CTF&lt;/span>
is the final challenge of the
&lt;a href="https://tryhackme.com/module/threat-hunting" target="_blank" rel="noopener noreferrer">Threat Hunting&lt;i class="fas fa-external-link-square-alt ms-1">&lt;/i>&lt;/a> module on THM. It follows-up right after Hunt Me I,
but the questions guide the investigation much less than before.&lt;/p></description></item><item><title>CTF Guide: Hunt Me I - Payment Collectors</title><link>https://josusb.com/blog/ctf-huntme-i/</link><pubDate>Fri, 10 May 2024 00:00:00 +0000</pubDate><guid>https://josusb.com/blog/ctf-huntme-i/</guid><description>&lt;p>This
&lt;span class="dictionary" data-text="Capture The Flag refers to finding hidden messages (flags) on a computer network as a challenge. Finding flags usually requires some form of hacking. Popular CTF platforms include Hack The Box &amp;amp; TryHackMe.">CTF&lt;/span>
is a threat-hunting practice scenario.
We&amp;rsquo;ll have to investigate malicious activity on a computer that&amp;rsquo;s been the
victim of a phishing attack, from initial access all the way to stealing
confidential data.&lt;/p></description></item></channel></rss>