
SOC335---CVE-2024-49138-Exploitation-Detected
SOC335 incident response walkthrough for CVE-2024-49138 CLFS privilege escalation, covering alert triage, threat intel enrichment, process tree…
digital-forensicseducationincident-response+7

SOC335 incident response walkthrough for CVE-2024-49138 CLFS privilege escalation, covering alert triage, threat intel enrichment, process tree…

Cryptographic terminal forensics and session replay for AI agents. Tracks, signs, and audits every command with provenance labels, replayable…

Read, understand and silence the Windows GDID device identifier (the ID that tracked a hacker through a VPN). Verified on a real Win11 VM. Honest: it…

This is the office check script provided by cPanel for all the users who are using cPanel

A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…