SOC-200/OSDA 認證考試心得分享

Explore how to elevate your threat hunting capabilities with Splunk.

Logging all PowerShell command activities.

Pcap Analysis with Suricata

Running Snort with IPS mode

Never use print for debugging again, using the poor man debugger

Honeypot is a computer security mechanism set to detect, deflect, or, in some manner, counteract attempts at unauthorized use of information systems. Generally, a honeypot consists of data (for example, in a network site) that appears to be a legitimate part of the site and contain information or resources of value to attackers. It is actually isolated, monitored, and capable of blocking or analyzing the attackers.

Introduce basic Python decorator using