network forensics

SAIL-2025

Solving the Openfire Lab Blue team challenge

As a cybersecurity analyst, you are tasked with investigating a data breach targeting your organization’s Openfire messaging server.
Attackers have exploited a vulnerability in the server, compromising sensitive communications and potentially exposing critical data.

Read More
ShadowCitadel cover

Solving the ShadowCitadel Lab Blue team challenge 🫆

Today, we dive into a host-based forensics investigation − a curious case of a breach inside the enterprise environment of a company called TechSynergy.
They have detected an anomaly after an employee engaged with an unexpected email attachment. This triggered a series of covert operations within the network, including unusual account activity and system alterations.

Read More
Bars in Dublin at dusk

Solving the XLMRat Blue team challenge

Today we’re looking at the XLMRat malware. It is a remote access trojan (hence the RAT part) built to be small, sneaky, and stupidly persistent. It typically rides in via phishing or social engineering, often disguised as something mundane, like a JPG or TXT file. It targets Windows systems and speaks fluent PowerShell. It’s popular […]

Read More
Top title image

Solving the WebStrike Blue Team Challenge

The challenge In the intricate world of cybersecurity, every attack leaves behind digital footprints waiting to be deciphered. In this post, we embark on a brief journey to unravel a cyber threat, dissecting each element that reveals an attacker’s origin, tactics, and motives. Let’s dive in. The challenge is presented by CyberDefenders (https://cyberdefenders.org) and can […]

Read More