Alican Kiraz – Medium

Apr 24

Destroy the Ransomware Threat: Part 1.1 — Detection and Prevention

Hi everyone, in this series of articles we’ll discuss a more exciting topic: ransomware. First, we will learn how to detect ransomware before it takes over the entire system. Then we will consider how we can protect our systems. A ransomware attack is not a threat that we can prevent…

Ransomware

9 min read

Ransomware

9 min read

Apr 11

Threat Hunting for Windows Event Logs

Firewall, Windows Event Logs, and Linux Audit Logs are the most basic logs that strengthen our hands when we hunt threats in an institution’s cyber infrastructure. Precious data is created when our correlations in SIEM are enriched with Sysmon, Linux Auditd, and HIDS — NIDS Logs. …

Threat Hunting

5 min read

Threat Hunting

5 min read

Apr 6

Cyber Security -Incident Response Part 4: Post-Incident Activity| EN

Hi everyone, In the last step of our Incident Response series, I will discuss Post-Incident Activities. Throughout our IR series, we rehearsed an incident at every stage and made our preparations. …

Incident Response

6 min read

Incident Response

6 min read

Apr 2

My Blue Team Certification Journey and Creating Your Own Blue Team Certification Roadmap

Hi everyone, you know how much I am interested in certificate programs :) You often ask me questions about the certificates I have earned. I wanted to tell you about the experiences I learned by preparing a detailed article. First of all, the value of a certificate is directly proportional…

Cyber Security Training

8 min read

My Blue Team Certification Journey and Creating Your Own Blue Team Certification Roadmap

Cyber Security Training

8 min read

Mar 30

Cyber Security - Incident Response Part 3.3: Recovery | EN

Hi everyone, after a long break, we continue with our Incident Response series’s second to last article. At this stage, we will renew/repair the infected systems we isolated and destroy and make our systems function again. In the recovery step, an IR team must think about these three items three…

Cyber Security

4 min read

Cyber Security

4 min read

Aug 30, 2022

Threat Hunting for Windows Registry

The registry is a file system by Microsoft Windows operating systems that stores application settings, low-level system settings, and user preferences. Registry Structure: • Hives: contain keys (directories) and values • Keys: might contain subkeys and/or values • Subkeys: no difference between key and subkey structure • Values: store data

Threat Hunting

3 min read

Threat Hunting

3 min read

Published in

Trendyol Tech

·May 29, 2022

Cyber Security -Incident Response Part 3.2: Eradication |EN

In this part of our series, we will ensure that the system(s) or Network(s) affected by the attack after the Containment phase are destroyed after making the necessary evidence and investigations. However, the Eradication step should not be a primary and quick decision option. …

Incident Response

4 min read

Incident Response

4 min read

Published in

Trendyol Tech

·May 5, 2022

Cyber Security -Incident Response Part 3.1: Containment |EN

In this part of our series, we will examine a security breach incident where the defense layer of our system or systems was somehow breached. Step 3 of IR includes Containment, Eradication, and Recovery. Taking our compromised system or systems into containment in the 3rd step of IR will prevent…

Cyber Security Training

6 min read

Cyber Security -Incident Response Part 3.1: Containment |EN

Cyber Security Training

6 min read

Published in

Trendyol Tech

·Apr 25, 2022

Cyber Security -Incident Response Part 2.2: Analysis |EN

In this part of my Article Series, we will focus on the Analysis phase. We will write detection rules on HIDS, NIDS, and SIEM systems that we have completed the installation. We will also examine the analysis stages using Sysmon and WinEventLog. We will try to touch on all the…

Threat Hunting

12 min read

Cyber Security -Incident Response Part 2.2: Analysis |EN

Threat Hunting

12 min read

Published in

Trendyol Tech

·Apr 21, 2022

Cyber Security -Incident Response Part 2.1: Installation of Detection Systems | EN

At this stage of my article series; We will focus on the monitoring, event tracking, and detection phases of our corporate inventories, which we determined with gap analysis during the preparation phase. In the first step, we will focus on the Detection part of IR’s Detection and Analysis phase. In…

Cybersecurity

11 min read

Cybersecurity

11 min read