How anh-cybersecurity/cyberdefenders_writeup works
This repository is a collection of Blue Team lab walkthroughs and forensic reference notes for learning investigation skills. Its user workflow is to consult a challenge writeup or a topic note while studying an analysis technique; the files are standalone documents, not an executable application. The README describes the collection and names commonly used tools, but the available evidence does not establish links between particular documents, tools, or investigation stages, so no relationships are asserted.
Components 8
Lab writeups
- Benign lab
Benign.md - PhishStrike lab
PhishStrike Lab.md - Sysinternals lab
Sysinternals Lab.md - Unit42 lab
Unit42.md
Forensic notes
- Amcache hive notes
Notes/Amcache Hve.md - PowerShell history notes
Notes/Powershell History.md - PhishStrike notes
PhishStrike Lab.md
Other components
- Collection overview
README.md