[ 𝙒𝙞𝙣𝙜𝙘𝙤𝙙𝙚 𝙥𝙖𝙧𝙩𝙣𝙚𝙧 ] ᵒᶠᶠⁱᶜⁱᵃˡ inc. COMPANY - Statistics & analytics of Telegram channel @wingcodepartner

9 554

Tomorrow I will share knowledge about the FUD [ Fully undetectable payload ] on rat tool . This class is requested by WINGCODE PARTNER student . > 🔻

9 554

Except recordings classes kakunda emaina pending vi unte update in discussion group https://t.me/wingcodepartnerdiscussion

9 554

Only one reaction 😡

9 554

9 554

Answer. B

9 554

31st module

9 554

https://www.canva.com/design/DAGMI9jJvjg/R64IITp4CazwOR9aA4i_kA/edit

9 554

class as been started ✊

9 554

Introduction: Windows event logs are essential for monitoring and managing the health and security of a system. Familiarizing yourself with different types of event logs, knowing how to access them, and understanding their significance can help in identifying and responding to potential issues. Types of Windows Event Logs: 1. Security Logs: Track login attempts, resource access, and system changes. 2. Application Logs: Record events from applications running on the system. 3. System Logs: Capture events related to system components and drivers. 4. Setup Logs: Log events related to system setup and updates. 5. Forwarded Events: Collect events forwarded from other systems. Accessing Windows Logs: To access Windows logs, use the Event Viewer (eventvwr.msc). Navigate through categories such as Security, Application, and System to find relevant logs. Establishing Baselines: Analyze logs over time to understand normal system behavior and establish baselines. This helps in identifying anomalies. Identifying Key Events: Certain event IDs indicate suspicious activities: • 4624: Successful logon • 4625: Failed logon • 4672: Special privileges assigned to a new logon • 4688: New process creation • 4719: System audit policy change • 4720: User account creation • 4723: Attempt to change an account’s password • 4732: Addition to a security-enabled local group • 1102: Audit log cleared Analyzing Logon Events: Investigate logon/logoff events to detect unauthorized access: • 4624 (Logon Type 2): Interactive logon • 4624 (Logon Type 3): Network logon • 4624 (Logon Type 10): Remote interactive logon Process Creation and Modification: Analyze process creation events to detect suspicious processes. Look for unusual process names and paths in event ID 4688 and check for changes to critical system files or registry keys.

9 554

What Port number is used by LADP protocol?

Anonymous voting

9 554

Hiring for L1 Security Analyst (EDR) @ Sion location. Salary: Open for Good resource. Interested candidates please share cv on sugandhahande@orientindia.net Key Responsibilities: 1. Monitor security alerts and notifications from the EDR platform and other security tools. 2. Perform initial analysis and triage of potential security incidents to determine severity and impact. 3. Escalate confirmed threats to L2 security analysts for further investigation. 4. Document all activities during an incident and provide timely and concise communication to SOC management. 5. Participate in developing incident response protocols and procedures. 6. Stay up-to-date with the latest security threats and trends. 7. Assist in the maintenance and fine-tuning of the EDR platform to improve detection capabilities. Qualifications: 1. Bachelor’s degree in Computer Science, Information Security, or a related field. 2. Basic understanding of cybersecurity principles, frameworks, and standards.