Hacking Articles

Raj Chandel's Blog

Threat Hunting

Advanced threat hunting methodologies for blue teams and SOC analysts. Learn to detect adversaries using EDR tools (CrowdStrike, SentinelOne), SIEM queries (Splunk, Elastic), and MITRE ATT&CK-based hypothesis hunting. Covers: malware artifact analysis (memory, disk, logs), anomaly detection in network traffic, and building custom detection rules. Includes real-world case studies, open-source hunting tools (Velociraptor, KQL), and proactive defense strategies against APTs and ransomware.

Threat Hunting

AlienVault: Threat Hunting/Network Analysis

In today’s rapidly evolving cybersecurity landscape, proactive detection is more critical than ever. AlienVault Threat Hunting empowers security professionals to identify and investigate suspicious activities

Threat Hunting

AlienVault: OSSEC (IDS) Deployment

In this article, we will discuss of Deployment of OSSEC (IDS) agents to the AlienVault server. OSSEC is an open-source, host-based intrusion detection system (commonly

Threat Hunting

Threat Hunting: Velociraptor for Endpoint Monitoring (Part 2)

In our previous article, we have covered with Velociraptor master server setup with a brief demonstration of Velociraptor installation, GUI interface set up with some

Threat Hunting

Threat Hunting: Velociraptor for Endpoint Monitoring

A velociraptor is a tool for collecting host-based state information using Velocidex Query Language (VQL) queries. To learn more about Velociraptor, read the documentation on

Pentest Lab Setup, Threat Hunting

Threat Hunting: Log Monitoring Lab Setup with ELK

Elastic Stack is formerly known as the ELK Stack. Elk Stack is a collection of free opensource software from Elastic Company which is specially designed

Threat Hunting

A Deep Drive on Proactive Threat Hunting

We all know that the proactive threat hunting is need of the hour and as we have already discussed the basic requirement that highlights all

Threat Hunting

Threat Hunting – A proactive Method to Identify Hidden Threat

According to ISO 27005, a threat is defined as a potential cause of an incident that may cause harm to systems and organization. Software attacks, theft of