Back to all projects

Part 16: Windows Authentication Logs and RDP/SSH Brute Force Alerts

2024-11-16
Samson Otori
Personal Project
Blue Team
Part 16: Windows Authentication Logs and RDP/SSH Brute Force Alerts

Project Gallery

30 Days MYDFIR SOC Analyst Challenge Day 16
Windows
Authentication
Alerts
SOC
Security Monitoring

Continue Reading

PreviousProject 3: 30-Day MYDFIR SOC Analyst Challenge · Part 15 of 30
Part 15: Remote Desktop Protocol Introduction

Part 15: Remote Desktop Protocol Introduction

Day 15 of the 30-Day MYDFIR SOC Analyst Challenge: Understanding RDP vulnerabilities, detection tools, and security best practices.

Nov 15, 2024

Read previous
NextProject 3: 30-Day MYDFIR SOC Analyst Challenge · Part 17 of 30
Part 17: Building a Dashboard for RDP And SSH Activity

Part 17: Building a Dashboard for RDP And SSH Activity

Day 17 of the 30-Day MYDFIR SOC Analyst Challenge: Creating comprehensive dashboards to monitor and analyze RDP and SSH authentication atte…

Nov 17, 2024

Read next
Related Projects
Part 14: Creating an SSH Brute Force Alert and Dashboard
Blue Team

Part 14: Creating an SSH Brute Force Alert and Dashboard

Nov 14Project
Part 22: Creating Alerts and Dashboards for Mythic C2 Detection
Blue Team

Part 22: Creating Alerts and Dashboards for Mythic C2 Detection

Nov 22Project
Part 17: Building a Dashboard for RDP And SSH Activity
Blue Team

Part 17: Building a Dashboard for RDP And SSH Activity

Nov 17Project
Oldest Projects
Introduction to the MYDFIR SOC Analyst Challenge
Blue Team

Introduction to the MYDFIR SOC Analyst Challenge

Oct 31Project
Part 1: Foundation, A Logical Network Diagram
Blue Team

Part 1: Foundation, A Logical Network Diagram

Nov 1Project
Part 2: Diving into the ELK Stack
Blue Team

Part 2: Diving into the ELK Stack

Nov 2Project
Newest Projects
Project 6.0: LOG(N) Pacific Internship – Vulnerability Management: Windows Authenticated vs Unauthenticated Scanning with Tenable
Blue Team

Project 6.0: LOG(N) Pacific Internship – Vulnerability Management: Windows Authenticated vs Unauthenticated Scanning with Tenable

Nov 21Project
Project 5.9: LOG(N) Pacific Internship Final Project – Detecting Tor Browser Usage on Corporate Endpoint - Threat Hunting Scenario (Part 2: The Threat Hunt)
Blue Team

Project 5.9: LOG(N) Pacific Internship Final Project – Detecting Tor Browser Usage on Corporate Endpoint - Threat Hunting Scenario (Part 2: The Threat Hunt)

Nov 17Project
Project 5.9: LOG(N) Pacific Internship Final Project – Detecting Tor Browser Usage on Corporate Endpoint - Threat Hunting Scenario (Part 1: Malicious Activity Simulation)
Blue Team

Project 5.9: LOG(N) Pacific Internship Final Project – Detecting Tor Browser Usage on Corporate Endpoint - Threat Hunting Scenario (Part 1: Malicious Activity Simulation)

Nov 17Project
Project Categories
All
57
Cloud
13
Blue Team
39
Red Team
2
Infrastructure
3