Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
Hayabusa
Being the first time you have probably heard about this tool, if you search it up you will get some japanese motorcycles, search Hayabusa event viewer. Hayabusa-Repo Setup Using the actual tool Some…

FTK Imager
FTK Imager Documentation Overview FTK Imager is a free forensic tool from AccessData used to preview and capture data in a forensically sound manner. In SOC and IR work, it’s mainly used to acquire…

Elastic Doc Local
Elastic Local Documentation Elasticsearch is a distributed search and analytics engine, scalable data store, and vector database built on Apache Lucene. It’s optimized for speed and relevance on…

Elastic Doc Cloud
Elastic Cloud Documentation Elasticsearch is a distributed search and analytics engine, scalable data store, and vector database built on Apache Lucene. It’s optimized for speed and relevance on…

Dionaea
Dionaea Documentation About Dionaea is a low-interaction honeypot designed to capture malware and exploits targeting services such as SMB (port 445) HTTP (port 80) FTP (port 21) TFTP MSSQL SIP It…
Binary Ninja
Binary Ninja is a reverse engineering platform for analyzing binaries (PE, ELF, Mach-O, etc.) It’s used in malware analysis , vulnerability research , and reverse engineering - key skills for analysts…

Autopsy
Autopsy Documentation Autopsy is one of the most widely used open-source digital forensics platforms. It is built on top of The Sleuth Kit (TSK) and provides a graphical interface for investigating…
softSkills
Soft Skills Soft skills are what will make you stand out as a SOC analyst, even while technical skills are what got you in. Developing the mentality, communication patterns, and teamwork that increase…

malwareForensics
Malware Forensics With Radare 2 and IDA Introduction Malware forensics is the process of dissecting malicious binaries to understand their behavior, purpose, and potential impact on a system or…

Lab MalwareForensics
Malware Forensics With Radare 2 and IDA - Lab Overview Triage a small, safe binary, locate where it validates a password (an XOR-obfuscated secret), recover the hidden flag string, and patch the…

volatilityLab4
Volatility Part 4 Ubuntu VM Part1 Part2 Part3 Part4 This lab should be done as a continuation of the Volatility Documentation This is the 4th of 4 parts Setup The commands will be in this template:…

volatilityLab3
Volatility Part 3 Ubuntu VM Part1 Part2 Part3 Part4 This lab should be done as a continuation of the Volatility Documentation This is the 3rd of 4 parts Setup The commands will be in this template:…