Encient

DFIR

Encient

Cybersecurity Cheatsheets
Cybersecurity Cheatsheets
- DFIR
  DFIR
  - 🔍 Detecting Active Directory Attacks Using Splunk (in progress)
    🔍 Detecting Active Directory Attacks Using Splunk (in progress)
    
    Detecting Common User/Domain Recon
    
    Detecting Password Spraying
  - 🔍 Volatility 2 & 3 Cheatsheet
CTF Writeups
CTF Writeups
- 2023
  2023
  - ABOH 2023
    ABOH 2023
    
    [ About ]
    
    Fur Elise
    
    SCP 2.0
  - GOH 2023
    GOH 2023
    
    [ About ]
    
    Clone
    
    The Realm of Eerie-Area
  - GCTF 2023
    GCTF 2023
    
    [ About ]
    
    RSA
    
    Broken
    
    Wireshark 1
    
    Wireshark 2
    
    History
    
    KB
    
    Frequency
    
    Office
    
    Master Hidden Within the Slides
    
    PNG
- 2024
  2024
  - Wicked 6
    Wicked 6
    
    Haiku
    Haiku
    
    Enumeration and Escalation
    
    HTB
    HTB
    
    [ About ]
    
    Cash Me Ousside
    
    Almanac
    
    Number Cruncher
  - iHack 2024
    iHack 2024
    
    [ About ]
    
    Covert
    
    Memory
    
    Mystery File
  - GCTF 2024
    GCTF 2024
    
    [ About ]
    
    Blockchain
    Blockchain
    
    Allowance
    
    Cryptography
    Cryptography
    
    Warmup Salsa Sauce
    
    Warmup Cipher
    
    Overflow Resources
    
    Forensics
    Forensics
    
    QNA
    
    Fox Secrets
    
    Olivia's Boxter
    
    Stop Slacking Off
    
    MFTBasics
    
    Misc
    Misc
    
    I Forgot
    
    Find Me 1
    
    Find Me 2
    
    DevOps 101
    
    Dev(Sec?)Ops
    
    RE
    RE
    
    Phone Siapa Ni?
    
    Gopher-chan
    
    Web
    Web
    
    Rainbow I
    
    Rainbow II
    
    Pwn
    Pwn
    
    Ret2Win I
HTB Sherlocks (In Progress)
HTB Sherlocks (In Progress)
- Easy
  Easy
  - Easy1
- Medium
  Medium
  - Medium1
- Hard
  Hard
  - Hard1
Blog
Blog
- Archive
  Archive
  - 2025
  - 2024
  - 2023
- Categories
  Categories
  - Cloud
  - DFIR DFIR
    Table of contents
    
    Reversing a Phishing Webpage
    
    Build a Linux Profile for Volatility 2
  - Event
  - Honeypot
  - RE
  - Technical
  - Volatility

DFIR¶

Dec 2, 2024
in Technical, DFIR, RE
6 min read

Reversing a Phishing Webpage

This blog shows the steps of analyzing and reverse engineering a Microsoft Outlook login page that is sent through phishing email.

Dec 30, 2023
in Technical, DFIR, Volatility
7 min read

Build a Linux Profile for Volatility 2

Step-by-step guide on building an Ubuntu profile for Volatility 2 and fixing the errors.