log4shell-exploitation-detection

Log4Shell CVE-2021-44228 Exploitation, Detection & Remediation A hands-on offensive and defensive security project simulating the full lifecycle of the Log4Shell vulnerability: exploitation from an attacker-controlled VM, detection engineering in Splunk, and validated remediation. Why This Projec...

C2-detection-manjusaka

Detecting the "Manjusaka" C2 framework Detecting the C2 framework Manjusaka: "A Chinese sibling of Sliver and Cobalt Strike" References: Detection logic details: https://corelight.com/blog/detecting-manjusaka-c2-framework Writeup by Talos:...

Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

MITRE ATT&CK Threat Detection with Splunk Detection engineeri...

Linux Software Detection Application Removal (via Splunk): non-yum

Binary data 710018.prm...

Windows Service Modification Service Stop (via Splunk): code 903

Binary data 710048.prm...

Windows Service Modification Service Stop (via Splunk): code 7042

Binary data 710042.prm...