Auditd and sysmon notes

Coming soon (insert 90s-style GeoCities "Under construction" GIF)

;)

NCAE Competition prep notes

See the compiled NCAE notes below. These include:

• 10: Creating user accounts 👤
• 11: Managing permissions and sudo users 🔒
• 12: Exploring sudoers and removing users ❌
• 13: Groups 👥
• 14: Passwords and shadow hashes 🥷
• 16: Network services 🌐
• 17: Exploring network configuration 🌐🔧
• 18: Static network config in Kali / Debian
• 19: Static network config in CentOS / RHEL
• 20: Static network config in Ubuntu
• 22: Temporary, permanent, and flushing IPs 🚽
• 23: Nc, netcat, ncat, and netcat abuse 🙀
• 24: Web services with Apache 🌍
• 25: Router configuration and MiniHack completion 📡
• 26: ROUTING AND NETWORK CONFIGURING REVIEW 📓
• 27: SSH basics 🐚
• 28: Public-key cryptography, Modern public-key crypto algorithms, Using and Generating SSH keys 🔑
• 29: Passwordless shell access 🗝️🚫
• 30: SSH service through a router 🐚📡
• 31: DNS service 101 📚
• 32: DNS - Additional zones 📚🔳
• 33: DNS service through a router 📚📡
• 34: The Rsync service ♻️
• 35: Cron and cronjobs 🕐
• 36: Rsync and cron: automatic, secure backups 🕐🔏
• 37: The UFW firewall (no iptables anymore woohoo) 🔥
• 38: Active connection defense 101 🔫🛰️

https://github.com/ufsitblue/ufsitblue.github.io/blob/main/ncae/ncae_vids_notes.md

Some TryHackMe Blue team notes

• Sysinternals

  • https://github.com/ufsitblue/ufsitblue.github.io/blob/main/THM_notes_sysinternals.md

• Windows core processes

  • https://github.com/ufsitblue/ufsitblue.github.io/blob/main/THM_notes_windows_core_processes.md

CyberForce '22 - Notes on Competition Details

Watch this ASAP if you're a participant in this competition >:]

https://github.com/ufsitblue/ufsitblue.github.io/blob/main/notes_cyberforce_webinar_competition101.md

NIST SP 800-61 SparkNotes

This is an incidence response framework used in US federal computer networks, and is the model we will be using during CyberForce 2022.

Some very useful, conceptual strategies are specified here. Make sure you at least read section 3 of it.

https://github.com/ufsitblue/ufsitblue.github.io/blob/main/notes_NIST_800_61.md <- My notes https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf <- The full document