Bharath Narayanasamy

Metasploit Framework (MSFconsole) Cheatsheet

Disclaimer: This post is created solely for educational and research purposes. The techniques, tools, and concepts discussed are intended to enhance cybersecurity awareness and skills by demonstrating how offensive security testing works. Unauthorized access to computer…

Bharath Narayanasamy

VulnLAB

OpenCTI – Open Source Threat Intelligence Platform: PART I

OpenCTI (Open Cyber Threat Intelligence Platform) is a powerful open-source solution designed to help security teams collect, store, organize, and visualize threat intelligence in a structured way. Whether you’re a SOC analyst, threat hunter, or security…

Bharath Narayanasamy Threat Intel, threat_detection, OpenCTI

DETECT MITRE ATT&CK Elastic SIEM

SIEM: Onboarding WIndows Servers

When integrating Windows servers into your Security Information and Event Management (SIEM) platform, selecting the right log sources is crucial for effective threat detection while maintaining optimal system performance. This comprehensive guide outlines the essential Windows…

Bharath Narayanasamy SIEM, Windows

RED TEAM

Command & Control Mastery with Covenant C2: PART-I

In the realm of cybersecurity, especially within red teaming and penetration testing, Command and Control (C2) frameworks are pivotal. They facilitate the management of compromised systems, enabling operators to execute commands, maintain persistence, and exfiltrate data.…

Bharath Narayanasamy c2, covenant

Attacking Active Directory Active Directory AD²

Active Directory Enumeration with PowerView

Complete Active Directory Enumeration Using PowerView PowerView is a powerful PowerShell tool designed to perform detailed enumeration of Active Directory (AD) environments. It is widely used by penetration testers, red teamers, and security professionals to gather…

Bharath Narayanasamy AD attacks, enumeration

TryHackMe

TryHackMe: PyRAT

Pyrat is an easy-rated TryHackMe machine that simulates a running Python RAT on an open socket. The challenge involves leaking a GitHub account to gain access to the PyRat source code, which helps in understanding how the RAT operates and gain root access. Room Description:…

Bharath Narayanasamy tryhackme

Practical LABS

Install Docker on ParrotOS

Docker Setup on ParrotOS 6.3 In this tutorial, we’ll walk you through a foolproof, up-to-date method for getting Docker up and running on the latest release of Parrot OS (March, 2025).Because there's no official release from Parrot…

Bharath Narayanasamy Docker

DFIR

Hunting the hunters: DFIR with Velociraptor (PART-II)

We covered the deployment of Velociraptor Server and Client components in the first part of this series. You can read it here if you're interested. This part of the series will walk you through the capabilities…

Bharath Narayanasamy threat_detection, dfir, Velociraptor

DFIR

Hunting the hunters: DFIR with Velociraptor (PART-I)

Introduction In the ever-evolving world of Digital Forensics and Incident Response (DFIR), having a powerful tool at your disposal is essential. Velociraptor stands out as an advanced, open-source endpoint monitoring, digital forensics, and cyber response platform.…

Bharath Narayanasamy dfir, Velociraptor

RED TEAM

Caldera: Simulating a Complete Attack Chain

Attack Simulation In this blog post, we will explain the options to customise the Caldera framework and emulate an attack chain that traverses from Initial Access to Achieving the Objective. Before continuing further, please refer this…

Bharath Narayanasamy Elastic, wazuh, caldera, ELK