LetsDefend (SOC Analyst) - Event ID #92: Ransomware Detected

[@HackTheHackers]

If you do a dynamic analysis on the file, you can see its not making network connections, the URLs you provided is not related. When they ask if the file was quarantined, you can see the processes on the host and that it was running , so the host was infected before the containment.

[@ssboxer]

Just started Letsdefend (Soc Analyst) . I found this highly valuable. 👍🏾

[@clintonhoward8518]

Thanks for the rundown of a LetsDefend alert. I just purchased a year subscription so I'm glad to see it's has a decent UI and structure.

[@Micahs0day]

Glad to help!

[@2kslimey]

I learned more from this than most certification courses 😅

[@okanceliker7747]

Great hands-on practice, Thank you for sharing!

[@isaiahrouse4173]

I THINK for the if the malware was quarantined part, it means did you quarantine, flag, or block the file or other IOC's from being allowed in the future. The initial alert should show it was allowed since there was no control in place stopping it before. Good explanation and content.

[@karthikb573]

Great analysing plz do more videos it will be helpful

[@tedlessor3887]

Thanks bro i was looking for hands on training. Good looking out.

[@Sir_Zick]

The URL is not related to this ransomware attack incident. You can see in those log of that contains the URL are different date and time with this incident. From threat intelligence, there is no network communication by the ransomware

[@cybercey]

Great job man, i really liked to follow you through the process and learned a lot!

[@boulilanourelhak9638]

this is very informative keep up the good work

[@fireleather1707]

Very helpful, just started on letsdefend

[@matthewsharkey5685]

What are you using to copy and paste youre notes on? That looks like great help wile analysing. I could do with using that my self.

[@rakeshnachar570]

can u share the links to malware analysis bookmark you created

[@opeyemibalogun6486]

nice, can you share comptia CySA+ practice exam 😄😄?

[@Micahs0day]

Message me on twitter.

[@Listen2Dansoff]

GUY IS FULLY COKED OUT

[@productsbylizzie]

cool stuff!

[@johnvardy9559]

I play with try hack me, recommend also letsdedend worth it?

[@Micahs0day]

Sorry for the late reply, yes it's worth it!