#soc

Write up: suspicious mshta behavior

I've been trying out letsdefend.io for a couple of week, and here's a write up of one of the challenge. its a platform to hone your blue teaming skill, you will be using some sort of SIEM apps and act as an analyst, i.e. finding IOC and deciding esca...