Omar Amir — Blue Team Notes | Notion
About me
Windows Event IDs
Hunting Persistence (MITRE TA0003)
Hunting Lateral Movement (MITRE TA0008)
Hunting Discovery (MITRE TA0007)
Detecting AD Attacks
Network
Network Analysis Labs
Network Analysis Tools
Network Defenses
Memory forensics
Memory Forensics Labs
Volatility
Threat Intelligence
Threat Intelligence Labs
Threat Intelligence Toolkit
Logging Fundamentals
Log Analysis Labs
SIEM
Splunk