Syed Hasan – Medium

Home

Following

Library

Reading history

Stories

Stats

Syed Hasan

Pinned

Detection & Compromise: Secrets from the AWS Secrets Manager

Exposure of secrets can be disastrous. Read how to compromise and detect the exposure of secrets from the AWS Secrets Manager service.

Sep 4, 2022

Detection & Compromise: Secrets from the AWS Secrets Manager

Sep 4, 2022

Management of MFA Devices in AWS IAM

MFA is extremely important to secure your root and IAM user accounts in AWS. Let’s have a quick refresher on the API calls and analysis

Nov 25, 2022

Management of MFA Devices in AWS IAM

Nov 25, 2022

Non-spammy Newsletter: Stay up-to-date

I love to talk about security, malware, and the kung-fu of defending against the 'bad' in the world. Subscribe now for a copy of my work straight to your inbox!

By signing up, you will create a Medium account if you don’t already have one. Review our Privacy Policy for more information about our privacy practices.

Medium sent you an email at to complete your subscription.

AWS Session Manager: Securing Access to Cloud Resources

AWS Session Manager is a handy utility from the Systems Manager suite which can help securely access cloud resources without exposing…

Jun 21, 2022

AWS Session Manager: Securing Access to Cloud Resources

Jun 21, 2022

AWS Instance Metadata Service: A Quick Refresher

A quick refresher on AWS Instance Metadata Service (IMDS) which covers the service, its use-cases, and the two versions — IMDSv1 and IMDSv2

Jun 9, 2022

AWS Instance Metadata Service: A Quick Refresher

Jun 9, 2022

Honest Review of TCM Security’s Practical Malware Analysis and Triage

TCM Security recently published their new malware analysis training, PMAT. Here’s a review of the course, its content, and overall…

Nov 17, 2021

Honest Review of TCM Security’s Practical Malware Analysis and Triage

Nov 17, 2021

Reversing with IDA: Cross-references

Cross-references, or more commonly referred to as xrefs, are used to identify references (usage/call or declaration) of a particular…

Sep 19, 2021

Reversing with IDA: Cross-references

Sep 19, 2021

Forensic Analysis of an LNK File

Let’s dig into the file format of an LNK file and look how to view and parse them. We’ll also review a few ways threat actors use LNKs!

Aug 12, 2021

Forensic Analysis of an LNK File

Aug 12, 2021

Defender’s Toolkit 102: Sigma Rules

Don’t feel confident writing Sigma rules? Sigma isn’t as hard as it seems. Tag along as we explore how to write these rules efficiently!

Mar 6, 2021

Defender’s Toolkit 102: Sigma Rules

Mar 6, 2021

VBA Purging — What Purpose Does It Serve?

Purging a VBA of its compiled code serves several purposes. Take a look as we explore VBA purging and the defenses against it.

Nov 27, 2020

VBA Purging — What Purpose Does It Serve?

Nov 27, 2020

Digital Forensics Write-up — Web Server Case by Ali Hadi

The article is a write-up for challenge number one — the Web Server Case — by Ali Hadi on his blog, ‘ashemery.com’. The premise is set to:

Oct 26, 2020

Digital Forensics Write-up — Web Server Case by Ali Hadi

Oct 26, 2020

Sysmon: How To Setup, Configure, and Analyze the System Monitor’s Events

Sysmon, short for System Monitor, is a utility tool developed by Mark Russinovich, as part of the Sysinternals suite. The utility is…

Oct 22, 2020

Sysmon: How To Setup, Configure, and Analyze the System Monitor’s Events

Oct 22, 2020

Command-line Auditing on Windows: Why You Need It!

It’s unfortunate that the Windows Command Prompt, the descendant of the prehistoric command.com from MS-DOS, has no persistent storage of…

Oct 20, 2020

Command-line Auditing on Windows: Why You Need It!

Oct 20, 2020

Project Freta: Microsoft’s Cloud-based Memory Analysis Engine

Ah, the sweet days of running your memory sample through volatility. It’s not over yet — but Microsoft has done an amazing job at…

Jul 27, 2020

Project Freta: Microsoft’s Cloud-based Memory Analysis Engine

Jul 27, 2020

IBM QRadar: The Architecture!

Before you get started with the deployment of QRadar in your infrastructure, you need to understand the several components it makes use of…

Jun 19, 2020

IBM QRadar: The Architecture!

Jun 19, 2020

What are DLLs?

Dynamic-link Libraries (DLLs) are Microsoft’s implementation of shared code on the Windows Operating System. By means of modularizing code…

Jun 19, 2020

What are DLLs?

Jun 19, 2020

Defender’s Toolkit 101: Yara Rules!

A defender should always be equipped with the skill to write good Yara rules. Let’s explore writing these great detection rules!

Apr 6, 2020

Defender’s Toolkit 101: Yara Rules!

Apr 6, 2020

Pipe and Filter Architecture

Definition

May 26, 2019

Pipe and Filter Architecture

May 26, 2019

Layered Architecture

Definition

May 26, 2019

May 26, 2019

Syed Hasan

Syed Hasan

Hi, I’m Syed. Explore my articles as I embark on this journey of learning more about Forensics and Cloud! 🚀

Following

Help
Status
About
Careers
Press
Blog
Privacy
Rules
Terms
Text to speech