SOC
From Phishing to RDP Exploits: Real-World Windows Threat Detection Using Only Event Logs
Visit Room here:
We recently finished the Windows Logging for SOC room, which laid the foundation for understanding Windows event logs. In this room, we’ll build on that knowledge to detect real-world threats. If you haven’t gone through it yet, you can check it out here 👇
No answer needed
🔓 Initial Access is the attacker’s first step into a system — like slipping through the front door. Whether through exposed services like mail 📧 or SQL servers 🖥️, or tricking users with phishing emails 🎣 or USBs 💾, attackers use every opportunity they can find.