Evading Windows EvtLogs (Ar)

Defense Evasion using disable\clear windows evtlogs techniques

Evasion using Safe Mode (Ar)

An overview about Defense Evasion using Safe Mode

Mutex / Mutants (Ar)

An overview about the use of Mutex in Malware Analysis

Packer's Indicators (Ar)

Packed or Not ? here is the answer

imphash & sechash (Ar)

A small article about linking malware to their adversaries using imphash and sechash

BTS2023 CTF Writeup

My writeup for Blue Team Scholarship 2023 CTF Assessment

LoTL (Ar)

A small article about Living Off The Land in Arabic Language

1.Incident Handling Overview

This is a summary of what I learned from p1 in eCIR (IHRP Course)

Malware Traffic Analysis 6

This is my write-up for the Malware Traffic Analysis 6 challenge from CyberDefenders platform

Malware Traffic Analysis 5

This is my write-up for the Malware Traffic Analysis 5 challenge from CyberDefenders platform

Malware Traffic Analysis 4

This is my write-up for the Malware Traffic Analysis 4 challenge from CyberDefenders platform

Malware Traffic Analysis 3

This is my write-up for the Malware Traffic Analysis 3 challenge From CyberDefenders platform

Malware Traffic Analysis 2

This is my write-up for the Malware Traffic Analysis 2 challenge from CyberDefenders platform

Malware Traffic Analysis 1

This is my write-up for the Malware Traffic Analysis 2 challenge from CyberDefenders platform

CTI 101 Notes

This is my notes for CTI101 Certification Course

CountZero R1 Competition

This is my write-up for Flags Storm challenge from CountZero Round1 Final Competition

Persistence [RegKeys & StartupFolders] (Ar)

An article about persistence technique through reg keys and startup folders

Thread Execution Hijacking (Ar)

This is the 3rd article about process injection techniques

DLL Injection (Ar)

This is the 2nd article about process injection techniques

Process Injection Techniques [1] - Intro (Ar)

This is the 1st article about process injection techniques

CountZero R1 challenges

This is a write-up for all challenges that we solved in Round1 {Network Basics} with CountZero

PE File Format

A brief article about PE File and its structure

Malware Overview

A brief article about malware, their goals, their capabilities and their types

Sandbox Overview (Ar)

An article about Sandboxes in Arabic Language

IOCs Overview (Ar)

An article about IoCs in Arabic Language

Obfuscation Overview (Ar)

An article about Obfuscation in Arabic Language

TeasingButton challenge

A write-up for Teasing Button ctf challenge from CyberTalents platform

Deadlock challenge

A write-up for Deadlock ctf challenge on CyberTalents platform

CyberTalents DFIR [RE] CTF

This is my write-up for the DFIR Scholarship program ctf that hosted by CyberTalents

NightWalker challenge

NightWalker is a CTF challenge on CyberTalents platform and this is a -report like- writeup for it