Archive

35 posts published so far

If I were to start validating my cloud detection...

Ewaldo Simon Hiras

Jun 21, 2025

What Are Indicators of Compromise (IOCs) and Why Do They Matter?

Ewaldo Simon Hiras

Feb 16, 2025

Spice up your PowerShell with Starship

Ewaldo Simon Hiras

Jan 9, 2025

The curious case of Jdownloader VNC access

Ewaldo Simon Hiras

Dec 17, 2024

Measuring IR capability

Ewaldo Simon Hiras

Oct 12, 2024

Bsides CambridgeMA 2024

Ewaldo Simon Hiras

Aug 26, 2024

About onboarding log to SIEM

Ewaldo Simon Hiras

Aug 9, 2024

Moving the blog

Ewaldo Simon Hiras

Sep 24, 2023

Improving sentinel live response collection

Ewaldo Simon Hiras

Nov 1, 2022

A tale of two mentoring

Ewaldo Simon Hiras

Aug 21, 2022

CDEF bulletin 2022

Ewaldo Simon Hiras

Aug 17, 2022

Powershell base64 payload

Ewaldo Simon Hiras

Aug 6, 2022

DFIR tools

Ewaldo Simon Hiras

Apr 16, 2022

Windows core processes

Ewaldo Simon Hiras

Apr 13, 2022

Write up: suspicious mshta behavior

Ewaldo Simon Hiras

Jan 10, 2022

Various command for quick IR

Ewaldo Simon Hiras

Dec 23, 2021

Nginx log terkait log4j/ log4shell

Ewaldo Simon Hiras

Dec 11, 2021

Beberapa hal unik di situs publik

Ewaldo Simon Hiras

Sep 9, 2020

The fault in our shell

Ewaldo Simon Hiras

Jun 12, 2020

Forensik email melalui analisis header email

Ewaldo Simon Hiras

Apr 26, 2020

Persistence dengan netsh

Ewaldo Simon Hiras

Nov 1, 2019

Moving to static website

Ewaldo Simon Hiras

Archive

Detection Pipeline for CloudTrail Detection Engine

About idleak.net

CloudTrail Detection Engine

If I were to start validating my cloud detection...

What Are Indicators of Compromise (IOCs) and Why Do They Matter?

Spice up your PowerShell with Starship

The curious case of Jdownloader VNC access

Measuring IR capability

Bsides CambridgeMA 2024

About onboarding log to SIEM

Moving the blog

Improving sentinel live response collection

A tale of two mentoring

CDEF bulletin 2022

Powershell base64 payload

DFIR tools

Windows core processes

Write up: suspicious mshta behavior

Various command for quick IR

Nginx log terkait log4j/ log4shell

Beberapa hal unik di situs publik

The fault in our shell

Forensik email melalui analisis header email

Persistence dengan netsh

Moving to static website

Command Palette

Detection Pipeline for CloudTrail Detection Engine

About idleak.net

CloudTrail Detection Engine

If I were to start validating my cloud detection...

What Are Indicators of Compromise (IOCs) and Why Do They Matter?

Spice up your PowerShell with Starship

The curious case of Jdownloader VNC access

Measuring IR capability

Bsides CambridgeMA 2024

About onboarding log to SIEM

Moving the blog

Improving sentinel live response collection

A tale of two mentoring

CDEF bulletin 2022

Powershell base64 payload

DFIR tools

Windows core processes

Write up: suspicious mshta behavior

Various command for quick IR

Nginx log terkait log4j/ log4shell

Beberapa hal unik di situs publik

The fault in our shell

Forensik email melalui analisis header email

Persistence dengan netsh

Moving to static website