soc-investigation-powershell-edrfreeze

PowerShell EDRFreeze Investigation LetsDefend Case Study This repository contains a documented SOC investigation based on a LetsDefend scenario involving suspicious PowerShell activity, a GitHub-hosted payload, and execution of the EDRFreeze tool. What this repository includes Full report:...

CyberLabs-SOC-L1-RetailBreach

🛡️ CyberLabs SOC L1 – RetailBreach Investigation Overview...