Investigating Microsoft Defender Bypass with Splunk - TryHackMe New Hire Old Artifacts

[@kizitonjika8311]

I will keep watching...❤ Please don't stop thank you for all you do.

[@Sourav_Debnath]

Exactly

[@mourackb]

Great video, I did this challenge recently. Great to see your steps.

[@ayyoub2362]

is it possible that the search at 8:00 didn't work because you didn't put two \\ after Appdata?

[@DayCyberwox]

Great catch. Very possible

[@shanksshanks6819]

Nice Video bro. I currently work in GRC and want to transition to Blue Team. Now I am preparing for BTL1. Would you recommend to do PJPT before doing CCD or go straight to CCD after BTL1 ?

[@DayCyberwox]

Whichever order works as long as you’re learning.

[@shanksshanks6819]

@@DayCyberwox I am not sure if BTL1 is enough to do CCD or if PJPT is basically useless in my case

[@ArthurRamirezJ]

As a guy working in blue team, I'd reccomend Security+, BTL 1 THM SOC Lvl 1, and CySA+, then something like PJPT

[@shanksshanks6819]

@@ArthurRamirezJ you would not recommend CCD?

[@makeeasycash399]

Intresting!