Incident Response 17
- Incident Investigation Report: ClickFix - VodkaStealer — From Social Engineering to Full Network Compromise
- Incident Investigation Report: AWSRaid — Compromised IAM Credentials & S3 Data Exfiltration
- Memory Forensics Report: RedLine — Extracting Stealer Artifacts from RAM
- Incident Response Report: PsExec Hunt — Lateral Movement via SMB & PsExec in a Corporate Network
- Incident Response Report: JetBrains TeamCity — Auth Bypass, Web Shell & Credential Tampering
- Incident Response Report: LFI Escalation — From Directory Traversal to Full System Compromise
- Incident Response Report: RediShell — From Jenkins RCE to Container Escape & Kinsing Miner
- Incident Response Report: PoisonedCredentials — LLMNR/NBT-NS Poisoning & SMB Relay
- Incident Investigation Report: Poisoned PyTorch — Supply-Chain Compromise to Lynx Ransomware
- Incident Response Report: Maranhão — Trojanized Game Mod to Node.js Infostealer
- Incident Response Report: IIS Server Compromise & AgentTesla Infection
- Incident Response Report: Amadey Trojan (APT-C-36) — Memory Forensics & Malware Loader Analysis
- Incident Response Report: XXE Infiltration — XML External Entity Injection, Credential Theft & Web Shell Deployment
- Incident Response Report: Tomcat Takeover — Directory Brute-Force, Credential Cracking & Reverse Shell Persistence
- Incident Response Report: RetailBreach — Stored XSS, Session Hijacking & Path Traversal on ShopSphere
- Incident Response Report: Web Investigation — SQL Injection, Credential Theft & Web Shell Deployment
- Incident Response Report: WebStrike — Server Compromise & Network Forensics Investigation