Investigating Microsoft Defender Bypass with Splunk - TryHackMe New Hire Old Artifacts

TryHackMe New Hire Old Artifacts: https://tryhackme.com/r/room/newhireoldartifacts

TIMESTAMPS:
00:00 Intro
01:28 Malicious Password Viewer
05:48 Suspicious Binaries
13:09 Outbound C2 Communication
16:41 Registry Key Manipulation - Defender Bypass
19:04 Killing Processes and Deleting Binaries
24:44 Windows Defender Tampering
29:43 Threat IDs?
35:13 Another Malicious Binary
41:14 DLL Sideloading
43:30 Outro

_____________
🧬 CYBERWOX RESOURCES

🔹Cyberwox Unplugged Newsletter: https://cyberwox.substack.com/
🔹Cyberwox Cybersecurity Notion Templates for planning your career: https://daycyberwox.gumroad.com/l/cyberlearningframework
🔹Cyberwox Best Entry-Level Cybersecurity Resume Template: https://daycyberwox.gumroad.com/l/cybersecurityresume
🔹Learn AWS Threat Detection with my LinkedIn …

academy binary bypass communication defender discord dll dll sideloading ids intro key malicious manipulation password processes registry registry key resources sideloading tampering threat timestamps viewer windows windows defender