LetsDefend
22 write-ups · most recent first
LetsDefend — SOC328 — Akira Ransomware IOC’s Detected
MEDIUMSOC AlertRead on Medium
LetsDefend — SOC337 — Lazarus Phishing Campaign Detected (APT38)
MEDIUMSOC AlertRead on Medium
LetsDefend — SOC339 — ZDI-CAN-25373 Windows Shortcut Exploit Detected
SOC AlertRead on Medium
LetsDefend — Compromised Network Printer
Network Analysispcapnetwork analysislog analysis
Read on Medium
LetsDefend — SOC340 — Apache Tomcat Serialized Payload RCE (CVE-2025–24813)
SOC AlertRead on Medium
LetsDefend — Brute Force Attacks
Network Analysisnetwork analysislog analysiswireshark
Read on Medium
LetsDefend — Phantom Validation
Endpoint AnalysisRead on Medium
LetsDefend — SOC341 — Local Privilege Escalation via chroot CVE-2025–32463
SOC AlertRead on Medium
LetsDefend — SOC274 — Palo Alto Networks PAN-OS Command Injection Vulnerability Exploitation (CVE-2024–3400)
SOC AlertRead on Medium
SOC343 — WinRAR Zero-Day Path Traversal Vulnerability (CVE‑2025‑8088)
SOC AlertRead on Medium
SOC114 — Malicious Attachment Analysis
SOC AlertRead on Medium
SOC342 — CVE-2025–53770
SOC AlertRead on Medium
ICS FuelStation
MEDIUMNetwork Analysiswiresharktcppcap
Read on Medium
SOC344 — EDR Tampering Attempt via EDR-Freeze
SOC AlertRead on Medium
Investigate Web Attack
MEDIUMEndpoint AnalysisRead on Medium
SOC335 — CVE-2024–49138 Exploitation Detected
SOC AlertRead on Medium
SOC282 — Phishing Alert — Deceptive Mail Detected
SOC AlertRead on Medium
SOC319 — Suspicious DLL Execution Detected
SOC AlertRead on Medium
SOC338 — Lumma Stealer — DLL Side-Loading via Click Fix Phishing
SOC AlertRead on Medium
SOC336 — Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025–21298)
SOC AlertRead on Medium
SOC176 — RDP Brute Force Detected
SOC AlertRead on Medium
StageComp — Reverse Engineering
MEDIUMMalware AnalysisPEStudioGHidrastrings
Read on Medium