This is a presentation Edward Wade and I delivered at the University of California Davis Information Security Symposium 2019. It reviews building a Splunk infrastructure for security, as well as developing threat hunting and security analysis capabilities.
Read MoreCategory: Misc
OSCP Dump/ Purple Team Exercise Presentation
It’s been awhile since I posted. I’ve been finalizing my OSCP dump / purple team presentation for my team. I gave the presentation last week, and overall, thought it went well. We ran through 4 vulnerable machines, ran into a couple snags, but were able to power through. I think I need to shorten the … Continue reading "OSCP Dump/ Purple Team Exercise Presentation"
Read MorePassed the OSCP exam!
My OSCP journey has been 9 months, 4 exam attempts, and 2 lab sessions long… Today it all payed off! It took about a day and a half to get my exam results, and was informed I passed! With the things I’ve learned and the resources I’ve found, I’m going to continue to utilize and … Continue reading "Passed the OSCP exam!"
Read MoreOSCP Round 4… One last time?
I just recently submitted my OSCP exam and lab report for grading. This was the first time I had enough points to pass during the exam, with my lab/exercise submission being an added bonus. Compared to my previous attempts these boxes felt more “real world” then CTF-like. Take that with a grain of salt… I … Continue reading "OSCP Round 4… One last time?"
Read MoreHackthebox.eu
I recently found an OSCP-like resource to hold me over in between exams. Hackthebox.eu is a free online hacking lab. It has 20+ active machines, as well as 20+ challenges related to various CTF skills. So far I’ve owned a hand full of boxes and completed 2/3 of the forensic challenges. I found some great … Continue reading "Hackthebox.eu"
Read MoreTrying Harder…
OSCP didn’t go so well, but interestingly, I received two repeat machines. One I already owned, and another that completely stumped me. I made progress on two additional 20 point machines, but couldn’t get a user shell. I rooted 3/5 machines, not enough to pass 🙁 I already re-scheduled my exam, and believe I’m close … Continue reading "Trying Harder…"
Read MoreFinished PWK Lab Round 2
Just finished up round 2 of my lab time. Re-upping lab time was definitely worth it. I rooted about 20 boxes my first 2-2.5 months of lab access, and rooted another 22 this past month. I also went back and re-exploited machines that I used metasploit & sqlmap on. In total, I rooted 42 machines. … Continue reading "Finished PWK Lab Round 2"
Read More