Post

How To Use This Site

A Repo for Cluttered Minds. Use each card as a review topic for notebooks.

Topics Covered

1
2
3
4
5
6
7
8
9
---
Threat Hunting
Forensics
Cloud
Active Directory
Appsec Stuff
Radio
Other Projects
---

Threat Hunting

What SOC work eventually lead to. Detect, investigate, and mitigate. Learn to try and establish a motive to guess the target and where they might have gone. There is a reason your job has not been automated.

Stack: Splunk, Regex, Wireshark, EDR, Threat Detection

Forensics

The computer kind, or the investigation of system activity on digital devices to uncover evidence of a crime. I put Incident Response in this category, the whole Chain of Custody process, etc. The goal is to build up a narrative of what happened, like an actual crime scene.

Stack: Host-based Logs, EDR, MemprocFS, Volatility, Redline, Disk Forensics, Memory Forensics,

Active Directory

Homelabs galore, authentication, authorization, lots of Kerberos ticketing to test out the Threat Detection part. Think of this like a firing range.

Stack: Microsoft Active Directory, Kerberos, HyperV

Appsec Stuff

Honestly, a general umbrella term for software related projects, mainly playing around with API’s

Cloud

Code For San Jose / Open Source San Jose stuff

Radio

Other Projects

Want to learn coffee stuff?

If you’re looking for my art portfolio, that would be technomancer-01.com

I think this jekyll setup is much better suited towards documentation, although I am already seeing that it loads images better so I may use it for art as well. One big component for me is the Tome Fragment aspect of them, how we’re going to treat things as if they are actual historical documents to be analyzed.


Projects: On the Nature of Tarnished Souls, Bloodborne in Wonderland, Coruscant Library, DnD, Tales From the Leyline Road, Delta Green, m4ven.OS, and Medicine Bun.

1
2
3
4
5
6
7
8
9
---
Memprocfs: Small NASA Booklet. Confirmed to work
Volatility: 13 cubed version, Professor K version
Email Header Analysis:  Small NASA Booklet.
Prefetch files on Windows: Small NASA Booklet
Caesar Cipher: Under Basic Cantrips section
Price Calculator: Under Basic Cantrips section
Volatility (John Hammond): Just timestamps
---

This site uses the Gitpage + Jekyll stack with the Chirpy theme.

This post is licensed under CC BY 4.0 by the author.