📂 02 - D3FEND Log
Overview
Records written by the system or an application — Windows event logs, authentication logs, shell history, and application/service logs (web servers, databases…). Analysis builds a timeline of attacker activity from these entries.
D3FEND artifact: Log
🧠 Techniques
| File | Created |
|---|
📦 Tech Stack
| File | Created |
|---|
🛠️ Tools
| File | Created |
|---|
🚩 Related CTF Operations
| File | difficulty |
|---|---|
| HTB Sherlock - MangoBleed | Very Easy |