Ransomware Investigation with Splunk | TryHackMe PS Eclipse

[@octaviouswilliams1091]

Amazing video!
Thank you for giving us detailed insight into your methodology and thought process for this investigation.
I have learned so much from this one video!

[@adonistarcio]

Great video dude. I like how you teach. Keep it up!

[@UzoukwuEricIyke]

Wonderful video.
Really helpful. Thanks 🙏🏽

[@Cybernetblog]

Thanks that was great. One question. Instead of having to upload log files to splunk for analysis. Can I connect my devices to splunk directly. Secondly can splunk analyze snort log files? I’ve always seen suricata IDS log files in most demo…. Thirdly can you do a video on Microsoft sentinel. Thanks

[@rafaelbelahssen2514]

yes, you can forward your logs using Splunk Universal Forwarder

[@Ricknroll9]

Thanks! I was stuck at the end

[@shivaas6122]

Man loved it❤

[@adonistarcio]

By the way, the way I could be sure it was script.ps1 was by checking the hashes of all script files which shows them all are distributed by Microsoft, except script.ps1 which also shows as malicious

[@MotasemHamdan]

Definitely right it slipped off my mind.

[@johnvardy9559]

how i become soc analyst hero?

[@MotasemHamdan]

by trying :)

[@bczx9071]

First bro