Today I learned about Virustotal.com and how to get around in it. I have yet to learn what all the information actually is and how it's all related, but I can get around in it.
I also learned about attack.mitre.org. That's a huge database and it's gonna take me a minute to learn to navigate it. I understand automation is possible, but that's a lesson for far down the line.
I spent some time this morning doing another mock ADX investigation. I'm starting to get the hang of KQL and actually find it enjoyable, but timestamps gave me such a headache I had to set it aside. I couldn't get it to show me timestamps when all I had was a date (10/8/24). I was able to get the information I needed, but I had to sort the table rather than call up a specific date.
My brain is fried, so I am stopping for the day.
SOCIAL SHARE CARD GENERATOR