Security Analyst And Documentation - Phishing Email with Attachment.pdf
Jason T. — IT Support and Systems Monitoring
Project: Security Analyst And Documentation - Phishing Email with Attachment
After completing some SOC simulations on Tryhackme, I decided to do a small scenario of a Suspicious Email with an Attachment that is offered by Letsdefend.
Analysis includes the System and User involved which is the System name, IP address and recipient of the email, Along with the investigation details of what the Email and Attachment was and when the email was received along with analyzing the email headers and it's message source, and performing file analysis of the attachment that was included in the email itself.
The File Hash was used to search for any malicious signatures using Threat Intelligence such as Virus Total, and Hybrid Analysis. I also included the Tactics mapped with the executable and included links to the analysis overview which would aid in understanding the TTPs and Indicators for Higher Level SOCs analysts
I made sure to include additional Artifacts including contacted domains, IPs and other file names associated with the EXE.
This ended off with my final analysis along with remediation suggestions.
I hope you enjoy what I have to show you and if you have any suggestions feel free to share them!
#SOC #SecurityAnalyst #Documentation #MalwareAnalysis #EmailAnalysis #ThreatIntelligence
https://drive.google.com/file/d/1LB2rmTNEzX5h-k3Y-q9FrB3ljIMYRdEC/view?usp=sharing
5 reactions · 0 comments
Topics: #malwareanalysis, #emailanalysis, #threatintelligence, #securityanalyst, #soc, #documentation