The Cyber Log

Initial Access: Phishing emails, RDP brute force, VPN credential stuffing, unpatched public-facing apps (Exchange, Fortinet, Citrix).
Persistence: Scheduled tasks, new local admin accounts, WMI subscriptions, registry run keys.
Lateral Movement: Pass-the-hash, PsExec, WMIC, Remote Desktop to discovered systems.
Impact: Volume Shadow Copy deletion, backup destruction, file encryption, data exfiltration for double extortion.

Expert insights on Ethical Hacking, Pass-the-Hash, Mimikatz, Windows Event Logs Forensics, Wireshark Threat Hunting, OSINT, and Ransomware defense.

Pass-the-Hash & Mimikatz: Understanding Active Directory Credential Attacks
Windows Event Logs: A Forensics Deep Dive
Network Security Monitoring with Wireshark
OSINT for Penetration Testers

Cybersecurity · Forensics · Networking

Insights on ethical hacking, digital forensics, network security and IT ops — written from the field.

The Cyber Log | Cybersecurity Blog by Aswin Mathew

Professional deep-dives into Ethical Hacking, Digital Forensics (DFIR), and Network Security. Expert guides for Kochi-based and global security analysts.

Pass-the-Hash & Mimikatz: Active Directory Attacks
Windows Event Logs Forensics Deep Dive
Network Security Monitoring with Wireshark
OSINT for Penetration Testers
Defending Against Ransomware

Showing 7 articles