Samson's
Cybersecurity Portfolio
Options →
Back to all projects

Project 5.3: LOG(N) Pacific Internship: Threat Hunting Scenario 3: Suspected Data Exfiltration

2025-10-20
Samson Otori
Personal Project
Blue Team
Cloud
Project 5.3: LOG(N) Pacific Internship: Threat Hunting Scenario 3: Suspected Data Exfiltration
Blue Team
Cloud
Threat Hunting
Microsoft Defender for Endpoint
Data Exfiltration
Insider Threat
EDR
KQL
PowerShell
Microsoft Defender for Endpoint
KQL
PowerShell
Windows

Continue Reading

PreviousProject 5.4: LOG(N) Pacific Internship: Threat Hunting Scenario 4: PwnCrypt Ransomware Outbreak
Project 5.4: LOG(N) Pacific Internship: Threat Hunting Scenario 4: PwnCrypt Ransomware Outbreak

Project 5.4: LOG(N) Pacific Internship: Threat Hunting Scenario 4: PwnCrypt Ransomware Outbreak

A comprehensive threat hunting exercise investigating a PwnCrypt ransomware outbreak, using Microsoft Defender for Endpoint to analyze file…

Oct 24, 2025

Read previous
NextProject 5.2: LOG(N) Pacific Internship: Threat Hunting Scenario 2: Sudden Network Slowdown
Project 5.2: LOG(N) Pacific Internship: Threat Hunting Scenario 2: Sudden Network Slowdown

Project 5.2: LOG(N) Pacific Internship: Threat Hunting Scenario 2: Sudden Network Slowdown

A comprehensive threat hunting exercise investigating sudden network performance degradation caused by internal port scanning activity, usi…

Oct 14, 2025

Read next
Related Projects
Project 5.4: LOG(N) Pacific Internship: Threat Hunting Scenario 4: PwnCrypt Ransomware Outbreak
Blue Team

Project 5.4: LOG(N) Pacific Internship: Threat Hunting Scenario 4: PwnCrypt Ransomware Outbreak

Oct 24Project
Project 5.2: LOG(N) Pacific Internship: Threat Hunting Scenario 2: Sudden Network Slowdown
Blue Team

Project 5.2: LOG(N) Pacific Internship: Threat Hunting Scenario 2: Sudden Network Slowdown

Oct 14Project
Project 5.9: LOG(N) Pacific Internship Final Project – Detecting Tor Browser Usage on Corporate Endpoint - Threat Hunting Scenario (Part 2: The Threat Hunt)
Blue Team

Project 5.9: LOG(N) Pacific Internship Final Project – Detecting Tor Browser Usage on Corporate Endpoint - Threat Hunting Scenario (Part 2: The Threat Hunt)

Nov 17Project
Oldest Projects
Introduction to the MYDFIR SOC Analyst Challenge
Blue Team

Introduction to the MYDFIR SOC Analyst Challenge

Oct 31Project
Part 1: Foundation, A Logical Network Diagram
Blue Team

Part 1: Foundation, A Logical Network Diagram

Nov 1Project
Part 2: Diving into the ELK Stack
Blue Team

Part 2: Diving into the ELK Stack

Nov 2Project
Newest Projects
Project 6.4: Agent-Based Vulnerability Monitoring on Linux with Tenable Nessus Agent
Blue Team

Project 6.4: Agent-Based Vulnerability Monitoring on Linux with Tenable Nessus Agent

Dec 5Project
Project 6.3: Agent-Based Monitoring on Windows 11 Using Tenable Nessus Agents
Blue Team

Project 6.3: Agent-Based Monitoring on Windows 11 Using Tenable Nessus Agents

Nov 28Project
Project 6.2: LOG(N) Pacific Internship – Windows 11 Compliance Scanning Using a Custom Tenable Scan Template
Blue Team

Project 6.2: LOG(N) Pacific Internship – Windows 11 Compliance Scanning Using a Custom Tenable Scan Template

Nov 25Project
Project Categories
All
61
Cloud
17
Blue Team
39
Red Team
2
Infrastructure
3