Investigating Exploitation to Malware Delivery with Splunk

TryHackMe Incident Handling with Splunk (Part 2)

Watch full stream here: https://www.youtube.com/live/J6s1tsvV94g?si=MdIHCtL0ACCJtR5v

Room: https://tryhackme.com/room/splunk201


TIMESTAMPS:
00:00 Investigating Action On Objectives
08:27 Investigating SQL Injection
12:00 Investigating Command & Control
19:19 Investigating Weaponization
20:16 OSINT Robtex
22:21 VirusTotal
23:51 DomainTools
25:38 POISON IVY
27:11 Investigating Malware Delivery
28:11 Threat Miner
29:08 VirusTotal
29:35 Hybrid Analysis
32:11 Recap
34:41 Outro

_____________
🧬 CYBERWOX RESOURCES

🔹Cyber Stories Podcast: https://youtube.com/playlist?list=PLDqMNdDvMsRkIPsQdNvRnT9wEEyl3hr-A&si=7GdfWfnGxYprWwly
🔷Day's Engineering Diary: https://youtube.com/playlist?list=PLDqMNdDvMsRk7FURrZmjJCDcWuG7sjzJZ&si=yPmcl-K1PT4TrT70
🔹Cyberwox Unplugged Newsletter: https://cyberwox.substack.com/
🔹Cyberwox Cybersecurity Notion Templates for planning …

action amp analysis command control delivery domaintools exploitation handling hybrid hybrid analysis incident incident handling injection malware malware delivery miner objectives osint recap splunk sql sql injection threat timestamps tryhackme virustotal