Index of /archive/xalgorix/latest/internal/tools/skills/data/threat-hunting/

../
analyzing-cloud-storage-access-patterns/           06-Oct-2026 14:55       -
analyzing-office365-audit-logs-for-compromise/     06-Oct-2026 14:55       -
analyzing-persistence-mechanisms-in-linux/         06-Oct-2026 14:55       -
analyzing-powershell-empire-artifacts/             06-Oct-2026 14:55       -
analyzing-ransomware-network-indicators/           06-Oct-2026 14:55       -
building-threat-hunt-hypothesis-framework/         06-Oct-2026 14:55       -
detecting-aws-cloudtrail-anomalies/                06-Oct-2026 14:55       -
detecting-aws-iam-privilege-escalation/            06-Oct-2026 14:55       -
detecting-azure-lateral-movement/                  06-Oct-2026 14:55       -
detecting-azure-service-principal-abuse/           06-Oct-2026 14:55       -
detecting-compromised-cloud-credentials/           06-Oct-2026 14:55       -
detecting-cryptomining-in-cloud/                   06-Oct-2026 14:55       -
detecting-dcsync-attack-in-active-directory/       06-Oct-2026 14:55       -
detecting-dll-sideloading-attacks/                 06-Oct-2026 14:55       -
detecting-email-forwarding-rules-attack/           06-Oct-2026 14:55       -
detecting-golden-ticket-attacks-in-kerberos-logs/  06-Oct-2026 14:55       -
detecting-insider-threat-behaviors/                06-Oct-2026 14:55       -
detecting-kerberoasting-attacks/                   06-Oct-2026 14:55       -
detecting-lateral-movement-with-splunk/            06-Oct-2026 14:55       -
detecting-malicious-scheduled-tasks-with-sysmon/   06-Oct-2026 14:55       -
detecting-mimikatz-execution-patterns/             06-Oct-2026 14:55       -
detecting-ntlm-relay-with-event-correlation/       06-Oct-2026 14:55       -
detecting-oauth-token-theft/                       06-Oct-2026 14:55       -
detecting-pass-the-hash-attacks/                   06-Oct-2026 14:55       -
detecting-privilege-escalation-attempts/           06-Oct-2026 14:55       -
detecting-process-hollowing-technique/             06-Oct-2026 14:55       -
detecting-s3-data-exfiltration-attempts/           06-Oct-2026 14:55       -
detecting-serverless-function-injection/           06-Oct-2026 14:55       -
detecting-service-account-abuse/                   06-Oct-2026 14:55       -
detecting-suspicious-oauth-application-consent/    06-Oct-2026 14:55       -
detecting-suspicious-powershell-execution/         06-Oct-2026 14:55       -
detecting-t1003-credential-dumping-with-edr/       06-Oct-2026 14:55       -
detecting-t1055-process-injection-with-sysmon/     06-Oct-2026 14:55       -
detecting-t1548-abuse-elevation-control-mechanism/ 06-Oct-2026 14:55       -
detecting-wmi-persistence/                         06-Oct-2026 14:55       -
hunting-for-anomalous-powershell-execution/        06-Oct-2026 14:55       -
hunting-for-beaconing-with-frequency-analysis/     06-Oct-2026 14:55       -
hunting-for-cobalt-strike-beacons/                 06-Oct-2026 14:55       -
hunting-for-command-and-control-beaconing/         06-Oct-2026 14:55       -
hunting-for-data-exfiltration-indicators/          06-Oct-2026 14:55       -
hunting-for-data-staging-before-exfiltration/      06-Oct-2026 14:55       -
hunting-for-dcom-lateral-movement/                 06-Oct-2026 14:55       -
hunting-for-dcsync-attacks/                        06-Oct-2026 14:55       -
hunting-for-defense-evasion-via-timestomping/      06-Oct-2026 14:55       -
hunting-for-dns-based-persistence/                 06-Oct-2026 14:55       -
hunting-for-dns-tunneling-with-zeek/               06-Oct-2026 14:55       -
hunting-for-domain-fronting-c2-traffic/            06-Oct-2026 14:55       -
hunting-for-lateral-movement-via-wmi/              06-Oct-2026 14:55       -
hunting-for-living-off-the-cloud-techniques/       06-Oct-2026 14:55       -
hunting-for-living-off-the-land-binaries/          06-Oct-2026 14:55       -
hunting-for-lolbins-execution-in-endpoint-logs/    06-Oct-2026 14:55       -
hunting-for-ntlm-relay-attacks/                    06-Oct-2026 14:55       -
hunting-for-persistence-mechanisms-in-windows/     06-Oct-2026 14:55       -
hunting-for-persistence-via-wmi-subscriptions/     06-Oct-2026 14:55       -
hunting-for-process-injection-techniques/          06-Oct-2026 14:55       -
hunting-for-registry-persistence-mechanisms/       06-Oct-2026 14:55       -
hunting-for-registry-run-key-persistence/          06-Oct-2026 14:55       -
hunting-for-scheduled-task-persistence/            06-Oct-2026 14:55       -
hunting-for-shadow-copy-deletion/                  06-Oct-2026 14:55       -
hunting-for-spearphishing-indicators/              06-Oct-2026 14:55       -
hunting-for-startup-folder-persistence/            06-Oct-2026 14:55       -
hunting-for-supply-chain-compromise/               06-Oct-2026 14:55       -
hunting-for-suspicious-scheduled-tasks/            06-Oct-2026 14:55       -
hunting-for-t1098-account-manipulation/            06-Oct-2026 14:55       -
hunting-for-unusual-network-connections/           06-Oct-2026 14:55       -
hunting-for-unusual-service-installations/         06-Oct-2026 14:55       -
hunting-for-webshell-activity/                     06-Oct-2026 14:55       -
performing-cloud-native-threat-hunting-with-aws..> 06-Oct-2026 14:55       -
performing-threat-hunting-with-yara-rules/         06-Oct-2026 14:55       -