Etienne Patrick NYAWUMA

𝐖𝐢𝐧𝐝𝐨𝐰𝐬 𝐄𝐯𝐞𝐧𝐭 𝐋𝐨𝐠 𝐀𝐧𝐚𝐥𝐲𝐬𝐢𝐬!🛡️ Look into this resource: Windows Event Log Analysis. This thorough tutorial is your go-to resource for understanding Windows logs and improving your cybersecurity policies. 🔎 𝗪𝗵𝗮𝘁’𝘀 𝗜𝗻𝘀𝗶𝗱𝗲? ▪ Detailed breakdown of event log formats ▪ Key event IDs and their meanings ▪ Practical tips for configuring and aggregating logs ▪ Techniques for auditing account management, logon events, and more 🔎 𝗪𝗵𝘆 𝗟𝗲𝗮𝗿𝗻 𝗧𝗵𝗶𝘀: Understanding Windows event logs is critical for successful incident response and system monitoring in today's ever-changing cybersecurity landscape. Equip yourself with the knowledge required to spot and respond to potential dangers quickly. 👥 𝗪𝗵𝗼 𝗜𝘀 𝗜𝘁 𝗣𝗲𝗿𝗳𝗲𝗰𝘁 𝗙𝗼𝗿? ▪ Cybersecurity professionals looking to enhance their incident response capabilities ▪ IT administrators aiming to improve their logging and auditing practices ▪ Anyone interested in deepening their understanding of Windows security 𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s). 📈 𝗝𝗼𝗶𝗻 𝘁𝗵𝗲 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗖𝗼𝗻𝘃𝗲𝗿𝘀𝗮𝘁𝗶𝗼𝗻: 𝐏𝐚𝐬𝐬𝐢𝐨𝐧𝐚𝐭𝐞 𝐚𝐛𝐨𝐮𝐭 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲? 𝐅𝐨𝐥𝐥𝐨𝐰 𝐦𝐞 𝐟𝐨𝐫 𝐢𝐧𝐬𝐢𝐠𝐡𝐭𝐬, 𝐫𝐞𝐬𝐨𝐮𝐫𝐜𝐞𝐬, 𝐚𝐧𝐝 𝐭𝐢𝐩𝐬 𝐭𝐨 𝐞𝐧𝐡𝐚𝐧𝐜𝐞 𝐲𝐨𝐮𝐫 𝐬𝐤𝐢𝐥𝐥𝐬 𝐚𝐧𝐝 𝐬𝐭𝐚𝐲 𝐚𝐡𝐞𝐚𝐝 𝐢𝐧 𝐭𝐡𝐞 𝐟𝐢𝐞𝐥𝐝! 𝒀𝒐𝒖𝒓 𝒇𝒆𝒆𝒅𝒃𝒂𝒄𝒌 𝒊𝒔 𝒊𝒏𝒗𝒂𝒍𝒖𝒂𝒃𝒍𝒆. 𝑰𝒇 𝒚𝒐𝒖 𝒇𝒐𝒖𝒏𝒅 𝒕𝒉𝒊𝒔 𝒑𝒐𝒔𝒕 𝒉𝒆𝒍𝒑𝒇𝒖𝒍, 𝑰'𝒅 𝒍𝒊𝒌𝒆 𝒕𝒐 𝒉𝒆𝒂𝒓 𝒕𝒉𝒐𝒖𝒈𝒉𝒕𝒔 𝒊𝒏 𝒕𝒉𝒆 𝒄𝒐𝒎𝒎𝒆𝒏𝒕 𝒃𝒆𝒍𝒐𝒘... 𝑺𝒉𝒂𝒓𝒆 𝒕𝒉𝒊𝒔 𝒗𝒂𝒍𝒖𝒂𝒃𝒍𝒆 𝒓𝒆𝒔𝒐𝒖𝒓𝒄𝒆 𝒘𝒊𝒕𝒉 𝒚𝒐𝒖𝒓 𝒏𝒆𝒕𝒘𝒐𝒓𝒌 𝒂𝒏𝒅 𝒍𝒆𝒕'𝒔 𝒃𝒖𝒊𝒍𝒅 𝒂 𝒔𝒂𝒇𝒆𝒓 𝒅𝒊𝒈𝒊𝒕𝒂𝒍 𝒘𝒐𝒓𝒍𝒅 𝒕𝒐𝒈𝒆𝒕𝒉𝒆𝒓! 🌐 #CyberSecurity #WindowsEventLogs #IncidentResponse #ITSecurity #ProfessionalDevelopment #ShareTheKnowledge

32

How to create group policy in windows server 2019 . Example : create group policy name (remove clock ) to all users in organization unit (OU) to HR . --> First what is group policy (GPO) ? Group Policy is an administrative tool in Windows operating systems that allows administrators to manage and configure security settings and other configurations for computers and users in an Active Directory environment. Policies are applied through Group Policy Objects (GPOs), which can be linked to various locations such as Domains or Organizational Units (OUs). -->Type of group policy (GP) ? 1-Local Group Policy: Applied only to the local computer, not part of Active Directory. 2-Domain-based Group Policy: Used in Active Directory environments and applied to computers and users within the domain. -->Components of Group policy (GP) ? 1-Group Policy Objects (GPOs): Units that contain policy settings. They can be created, modified, and linked to specific locations in Active Directory. 2-Group Policy Management Console (GPMC): A tool used to manage and configure GPOs. 3-Active Directory: GPOs are applied within the Active Directory environment to users and computers. -->How to create Group policy object (GPO) ? in the Video. --> How to Updating and Verifying Policies ? 1-Update Policies: enter cmd [windows+R] in computer and write [gpupdate /force]. 2-Verify Policy Application: enter cmd [windows+R] in computer and write [gpresult]. -->Summary Group Policy is a powerful tool in Windows that allows administrators to efficiently manage IT environments. By setting and applying appropriate policies, you can ensure security and productivity within the organization. #MCSA #WindowsServer

102

6 Comments

Bypasses for the most popular WAFs Join our internship: viehgroup.com/tci #waf #security #vulnerability #pentesting #ctf #tech #technology #vulnerabilitymanagement #redteam #vapt #hacking #ethicalhacking #web #web3 #firewall #bugbounty #infosec #bugcrowd #informationsecurity #networksecurity #webapplicationsecurity #penetrationtesting #hackerone #linux #kalilinux #malwareanalysis #cybersecurity #api #apisecurity #cybersecuritytips #bughunting #appsecurity

20

Windows Post-Exploitation Command Execution #windows #serversecurity #windowssecurity #microsoft #postexploitation #Exploitation #commands #commandexecution #cybersecurity #oscp #networksecurity #mcsa #filesystem #infosec #appsec #redteam #purpleteam #bugbounty #bugbountytips #vapt

76

1 Comment

soyez Proactive

2

Active Directory Pentesting Tools #activedirectory #pentestingtools #linux #kalilinuxtools #networking #networksecurity #cybersecurity #infosec #appsec #vapt #Exploitation #redteam #infrastructuretesting #server #oscp

151

3 Comments

🔥Smap - passive Nmap like scanner built with shodan.io 📝Smap is a port scanner built with shodan.io's free API. It takes same command line arguments as Nmap and produces the same output which makes it a drop-in replacament for Nmap. 📰 Read more: https://lnkd.in/eAbQJh_W 🔖#infosec #cybersecurity #hacking #pentesting #security

9

2 Comments

Cross-Site Scripting (XSS) #infosec #cybersecurity #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #oscp #cybersecurityawareness #bugbounty #bugbountytips

6

Interview Questions Tips : Pentest, Red Team, Appsec & Blue Team Credit : Joas A Santos #interviewquestions #interviewtips #cybersecurity #pentesting #blueteam #redteam #cybersecurity #vapt #infosec #appsec #interview #tipsandtricks #informationsecurity

117

6 Comments

[ ExploitXpErtz > Hacking News ] -------------------------------- OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script ~~~~~~~~~~~ Cybersecurity researchers are warning about a new phishing campaign that targets Microsoft OneDrive users with the aim of executing a malicious PowerShell script. "This campaign heavily relies on social engineering tactics to deceive users into executing a PowerShell script, thereby compromising their systems," Trellix security researcher Rafael Pena said in a Monday analysis. The cybersecurity company is tracking the "crafty" phishing and downloader campaign under the name OneDrive Pastejacking. Read More: https://lnkd.in/g-D6QPrm Join Us: ~~~~~~~~ LinkedIn Community: https://lnkd.in/dU8hyiWG LinkedIn Page: https://lnkd.in/dp-6ivtp Whatsapp Community: https://lnkd.in/dYtzvt92 Our Facebook: https://lnkd.in/d6nGUG_j Youtube: https://lnkd.in/d7V2QZbh #Cybersecurity #InfoSec #EthicalHacking #PenTesting #CyberSecurityAwareness #CyberSecurityJobs #CyberDefense #Hacking #EthicalHacker #SecurityAnalyst #VulnerabilityAssessment #CyberSecurityTraining #CyberSecurityTips #CyberSecuritySolutions #CyberSecurityExpert #OffensiveSecurity #SecureCoding #Phishing #RedTeaming #Purpleteam #InfoSecNews #BugBounty #WebApplicationSecurity #AttackSurfaceManagement #FirewallSecurity #CyberSecurityThreats #SecureYourData #VulnerabilityManagement #PenetrationTesting #CyberSecurityCommunity #Exploit #Expertz #ExploitXpErtz #XpErtz #ExploitXpErts #XpErts

3

Cheat Sheet : Infrastructure Penetration Testing #infosec #cybersecurity #cybersecuritytips #pentesting #oscp #redteam #cissp #networking #networksecurity #CheatSheet #infosecurity #cyberattacks #security #linux #vapt #infrastructure #serversecurity #bugbounty #redteam

124

1 Comment

Stay Ahead in Your SOC Career with Continuous Learning! 🚀 Want to excel in your SOC Analyst career? Discover the importance of continuous learning and get practical tips to stay updated in our in-depth guide, "The Importance of Continuous Learning in a SOC Career: Tips for Staying Updated." Visit our website : https://lnkd.in/dAhSFBTq Share this valuable resource with your network and let’s elevate our cybersecurity skills together. We’d love to hear your thoughts and experiences—drop a comment below! #CyberSecurity #SOCAnalyst #ContinuousLearning #CareerGrowth #IndianCyberSecuritySolutions #ProfessionalDevelopment

9

2 Comments

When you do malware analysis on a VM, disconnect your machine from your network, the guest OS should be different from the host's one, that's defence in depth, also you always have to keep your virtualization software updated, why though you might ask ? ☠️ Virtual machine escape ☠️ :  A virtual machine escape is an exploit in which an attacker runs code on a VM that lets the operating system (OS) running within it break out and interact directly with the hypervisor. By exploiting a vulnerability in the hypervisor's code, guest OS or applications running on the VM, the attacker can directly interface with and compromise the underlying physical resources and VMs.VMs are designed to run in self-contained, isolated environments in the host. Each VM should be, in effect, a separate system, isolated from the host OS and any other VMs running on the same machine.The hypervisor, also known as a virtual machine monitor, is an intermediary between the host OS and VMs. It controls the host processor and allocates resources as required to each guest OS. If the system is working correctly, a guest OS wouldn't "know" that it's part of a VM.Rather, it "thinks" it has full access to the emulated -- or virtual -- machine that the hypervisor is providing.A VM escape attack compromises these normal actions. By exploiting a vulnerability, the attacker can bypass the isolation and security controls the virtualization layer provides. The exploitation of the hypervisor is called a hypervisor-level VM escape attack. Another way to execute a VM escape attack is to exploit the vulnerabilities in the guest OS or VM applications. This is a guest-level attack. Either way, a successful attack lets the attacker escape the isolation of a VM and then access and control the host OS and all the other VMs running on it. The attacker might also be able to access any sensitive information stored on the physical machine and even on the network to which it's connected. #malware #malware_analysis #DFIR #VM #OS #exploit #defence_in_depth #hacking #cybersecurity

16

4 Comments

Wireshark A Pentest Guide❤✨ Wireshark is a powerful network protocol analyzer that can be used for network packet forensics and password sniffing. The document covers the following: OSI Model: Wireshark can capture data across the different layers of the OSI model, from the Data Link layer up to the Application layer. Ethernet Header: Wireshark can analyze the source and destination MAC addresses in the Ethernet header. IP Header: Wireshark can examine details in the IP header such as IP version, TTL, and protocol type. TCP Header: Wireshark can dissect the TCP header to understand the structure and flags of TCP segments. Password Sniffing: Wireshark can capture passwords transmitted over unencrypted protocols like HTTP, Telnet, FTP, SMTP, and database protocols. HTTPS Decryption: Wireshark can decrypt HTTPS traffic if the private key is available. Firewall Rules: Wireshark can be used to create firewall rules based on the captured network traffic. The document emphasizes that this information is provided for educational and penetration testing purposes only, not for malicious use.

297

22 Comments

Hello Guys ! 🌟👋💼 During my university years, while preparing for the OSCP certification exam, I downloaded machines from the Vulnhub platform to practice and took detailed notes on their solutions. However, I didn't have the opportunity to publish these walkthroughs. Now, I'm creating a list called "OSCP Walkthrough Notes" on Medium and sharing these notes after revising them. My main goal in dedicating time to this is to provide practical methods for those who are curious about this field and have little or no experience, or for beginners who want to solve vulnerable machines. Therefore, I wanted to share my writings here and spread the word. 🔒💻🔎 I've created an introductory post about this article series, which you can read at the following link: 📝 https://lnks.in/dagFWhSZ 🚀 Below is the introduction to the twelfth post in the series. I've left the link in the comments for those interested. 📌 #security #cybersecurity #appsec #infosec #pentest #pentester #penetrationtesting #oscp #vulnhub #walkthrough #resourcesharing #erdemstarticles

68

5 Comments

Hello Guys ! 🌟👋💼 During my university years, while preparing for the OSCP certification exam, I downloaded machines from the Vulnhub platform to practice and took detailed notes on their solutions. However, I didn't have the opportunity to publish these walkthroughs. Now, I'm creating a list called "OSCP Walkthrough Notes" on Medium and sharing these notes after revising them. My main goal in dedicating time to this is to provide practical methods for those who are curious about this field and have little or no experience, or for beginners who want to solve vulnerable machines. Therefore, I wanted to share my writings here and spread the word. 🔒💻🔎 I've created an introductory post about this article series, which you can read at the following link: 📝 https://lnks.in/dagFWhSZ 🚀 Below is the introduction to the thirteenth post in the series. I've left the link in the comments for those interested. 📌 #security #cybersecurity #appsec #infosec #pentest #pentester #penetrationtesting #oscp #vulnhub #walkthrough #resourcesharing #erdemstarticles

60

4 Comments

Hello Guys ! 🌟👋💼 During my university years, while preparing for the OSCP certification exam, I downloaded machines from the Vulnhub platform to practice and took detailed notes on their solutions. However, I didn't have the opportunity to publish these walkthroughs. Now, I'm creating a list called "OSCP Walkthrough Notes" on Medium and sharing these notes after revising them. My main goal in dedicating time to this is to provide practical methods for those who are curious about this field and have little or no experience, or for beginners who want to solve vulnerable machines. Therefore, I wanted to share my writings here and spread the word. 🔒💻🔎 I've created an introductory post about this article series, which you can read at the following link: 📝 https://lnks.in/dagFWhSZ 🚀 Below is the introduction to the fourteenth post in the series. I've left the link in the comments for those interested. 📌 #security #cybersecurity #appsec #infosec #pentest #pentester #penetrationtesting #oscp #vulnhub #walkthrough #resourcesharing #erdemstarticles

38

3 Comments

Hello Guys ! 🌟👋💼 During my university years, while preparing for the OSCP certification exam, I downloaded machines from the Vulnhub platform to practice and took detailed notes on their solutions. However, I didn't have the opportunity to publish these walkthroughs. Now, I'm creating a list called "OSCP Walkthrough Notes" on Medium and sharing these notes after revising them. My main goal in dedicating time to this is to provide practical methods for those who are curious about this field and have little or no experience, or for beginners who want to solve vulnerable machines. Therefore, I wanted to share my writings here and spread the word. 🔒💻🔎 I've created an introductory post about this article series, which you can read at the following link: 📝 https://lnks.in/dagFWhSZ 🚀 Below is the introduction to the fifteenth post in the series. I've left the link in the comments for those interested. 📌 #security #cybersecurity #appsec #infosec #pentest #pentester #penetrationtesting #oscp #vulnhub #walkthrough #resourcesharing #erdemstarticles

39

5 Comments

🦈 New room TShark Challenge I: Teamwork from TryHackMe : Put your TShark skills into practice and analyse some network traffic. 🦈 This room presents you with a challenge to investigate some traffic data as a part of the SOC team. 🦈 Room Link: https://lnkd.in/dErfxfNp 🦈 YouTube video walk through: https://lnkd.in/dQKAdKCc #tryhackme #tshark #ctf #soc #blueteam

32

4 Comments