Index of /archive/xalgorix/latest/internal/tools/skills/data/threat-hunting/
../
analyzing-cloud-storage-access-patterns/ 29-Oct-2026 04:24 -
analyzing-office365-audit-logs-for-compromise/ 29-Oct-2026 04:24 -
analyzing-persistence-mechanisms-in-linux/ 29-Oct-2026 04:24 -
analyzing-powershell-empire-artifacts/ 29-Oct-2026 04:24 -
analyzing-ransomware-network-indicators/ 29-Oct-2026 04:24 -
building-threat-hunt-hypothesis-framework/ 29-Oct-2026 04:24 -
detecting-aws-cloudtrail-anomalies/ 29-Oct-2026 04:24 -
detecting-aws-iam-privilege-escalation/ 29-Oct-2026 04:24 -
detecting-azure-lateral-movement/ 29-Oct-2026 04:24 -
detecting-azure-service-principal-abuse/ 29-Oct-2026 04:24 -
detecting-compromised-cloud-credentials/ 29-Oct-2026 04:24 -
detecting-cryptomining-in-cloud/ 29-Oct-2026 04:24 -
detecting-dcsync-attack-in-active-directory/ 29-Oct-2026 04:24 -
detecting-dll-sideloading-attacks/ 29-Oct-2026 04:24 -
detecting-email-forwarding-rules-attack/ 29-Oct-2026 04:24 -
detecting-golden-ticket-attacks-in-kerberos-logs/ 29-Oct-2026 04:24 -
detecting-insider-threat-behaviors/ 29-Oct-2026 04:24 -
detecting-kerberoasting-attacks/ 29-Oct-2026 04:24 -
detecting-lateral-movement-with-splunk/ 29-Oct-2026 04:24 -
detecting-malicious-scheduled-tasks-with-sysmon/ 29-Oct-2026 04:24 -
detecting-mimikatz-execution-patterns/ 29-Oct-2026 04:24 -
detecting-ntlm-relay-with-event-correlation/ 29-Oct-2026 04:24 -
detecting-oauth-token-theft/ 29-Oct-2026 04:24 -
detecting-pass-the-hash-attacks/ 29-Oct-2026 04:24 -
detecting-privilege-escalation-attempts/ 29-Oct-2026 04:24 -
detecting-process-hollowing-technique/ 29-Oct-2026 04:24 -
detecting-s3-data-exfiltration-attempts/ 29-Oct-2026 04:24 -
detecting-serverless-function-injection/ 29-Oct-2026 04:24 -
detecting-service-account-abuse/ 29-Oct-2026 04:24 -
detecting-suspicious-oauth-application-consent/ 29-Oct-2026 04:24 -
detecting-suspicious-powershell-execution/ 29-Oct-2026 04:24 -
detecting-t1003-credential-dumping-with-edr/ 29-Oct-2026 04:24 -
detecting-t1055-process-injection-with-sysmon/ 29-Oct-2026 04:24 -
detecting-t1548-abuse-elevation-control-mechanism/ 29-Oct-2026 04:24 -
detecting-wmi-persistence/ 29-Oct-2026 04:24 -
hunting-for-anomalous-powershell-execution/ 29-Oct-2026 04:24 -
hunting-for-beaconing-with-frequency-analysis/ 29-Oct-2026 04:24 -
hunting-for-cobalt-strike-beacons/ 29-Oct-2026 04:24 -
hunting-for-command-and-control-beaconing/ 29-Oct-2026 04:24 -
hunting-for-data-exfiltration-indicators/ 29-Oct-2026 04:24 -
hunting-for-data-staging-before-exfiltration/ 29-Oct-2026 04:24 -
hunting-for-dcom-lateral-movement/ 29-Oct-2026 04:24 -
hunting-for-dcsync-attacks/ 29-Oct-2026 04:24 -
hunting-for-defense-evasion-via-timestomping/ 29-Oct-2026 04:24 -
hunting-for-dns-based-persistence/ 29-Oct-2026 04:24 -
hunting-for-dns-tunneling-with-zeek/ 29-Oct-2026 04:24 -
hunting-for-domain-fronting-c2-traffic/ 29-Oct-2026 04:24 -
hunting-for-lateral-movement-via-wmi/ 29-Oct-2026 04:24 -
hunting-for-living-off-the-cloud-techniques/ 29-Oct-2026 04:24 -
hunting-for-living-off-the-land-binaries/ 29-Oct-2026 04:24 -
hunting-for-lolbins-execution-in-endpoint-logs/ 29-Oct-2026 04:24 -
hunting-for-ntlm-relay-attacks/ 29-Oct-2026 04:24 -
hunting-for-persistence-mechanisms-in-windows/ 29-Oct-2026 04:24 -
hunting-for-persistence-via-wmi-subscriptions/ 29-Oct-2026 04:24 -
hunting-for-process-injection-techniques/ 29-Oct-2026 04:24 -
hunting-for-registry-persistence-mechanisms/ 29-Oct-2026 04:24 -
hunting-for-registry-run-key-persistence/ 29-Oct-2026 04:24 -
hunting-for-scheduled-task-persistence/ 29-Oct-2026 04:24 -
hunting-for-shadow-copy-deletion/ 29-Oct-2026 04:24 -
hunting-for-spearphishing-indicators/ 29-Oct-2026 04:24 -
hunting-for-startup-folder-persistence/ 29-Oct-2026 04:24 -
hunting-for-supply-chain-compromise/ 29-Oct-2026 04:24 -
hunting-for-suspicious-scheduled-tasks/ 29-Oct-2026 04:24 -
hunting-for-t1098-account-manipulation/ 29-Oct-2026 04:24 -
hunting-for-unusual-network-connections/ 29-Oct-2026 04:24 -
hunting-for-unusual-service-installations/ 29-Oct-2026 04:24 -
hunting-for-webshell-activity/ 29-Oct-2026 04:24 -
performing-cloud-native-threat-hunting-with-aws..> 29-Oct-2026 04:24 -
performing-threat-hunting-with-yara-rules/ 29-Oct-2026 04:24 -