M'hirsi Hamza – Medium

M'hirsi Hamza

Detect File and Directory Discovery Techniques on Windows using KQL

Detect File and Directory Discovery Techniques on Windows using KQL in simple steps

4 min readFeb 26, 2024

--

Detect File and Directory Discovery Techniques on Windows using KQL

--

M'hirsi Hamza

Detect Domain Trust Discovery Techniques on Windows using KQL

Atomic Red simulation and detection of domain trust technique

7 min readJan 30, 2024

--

Detect Domain Trust Discovery Techniques on Windows using KQL

--

M'hirsi Hamza

Detect Browser Bookmark Discovery Techniques on Windows using KQL

Discover in details and depth why and how we detect browser bookmark discovery …

4 min readJan 18, 2024

--

Detect Browser Bookmark Discovery Techniques on Windows using KQL

--

M'hirsi Hamza
in
System Weakness

Detect Application Windows Discovery Techniques on Windows using KQL

Detect Application Windows Discovery on simple steps and understand the background…

4 min readJan 16, 2024

--

Detect Application Windows Discovery Techniques on Windows using KQL

--

M'hirsi Hamza
in
System Weakness

Detect Domain Account Discovery Techniques on Windows using KQL and Atomic Red

Detect Domain Account Discovery Techniques on Windows using KQL and Atomic Red, step by step guide with explanation

7 min readDec 21, 2023

--

Detect Domain Account Discovery Techniques on Windows using KQL and Atomic Red

--

M'hirsi Hamza
in
System Weakness

Detect discovery techniques on windows using KQL

Detect Local Account Discovery Techniques on Windows using KQL and Atomic Red

5 min readDec 19, 2023

--

Detect discovery techniques on windows using KQL

--

M'hirsi Hamza

Set a Sentinel environment and start collecting logs on Azure

Set Sentinel from Scratch and collect logs on a test machine on Azure

5 min readDec 16, 2023

--

Set a Sentinel environment and start collecting logs on Azure

--

M'hirsi Hamza

Simulate Discovery Techniques on Windows via Atomic Red

Hi Medium! Here we are again with a new article related to Sentinel, we will simulate different attacks and we will show you how we can…

5 min readSep 29, 2023

--

Simulate Discovery Techniques on Windows via Atomic Red

--

M'hirsi Hamza
in
System Weakness

Detect FIN6 on Azure Sentinel Part 2: Threat Hunting using KQL

Hi Medium! Here we are again with a new article about Sentinel this is the follow-up (part 2) to the previous article Detect FIN6 on…

11 min readMar 6, 2023

--

Detect FIN6 on Azure Sentinel Part 2: Threat Hunting using KQL

--

M'hirsi Hamza

Detect FIN6 on Sentinel Part 1: Run FIN6 exploit

Hi Medium! Here we are again with a new article about Sentinel.

4 min readJan 10, 2023

--

Detect FIN6 on Sentinel Part 1: Run FIN6 exploit

--

M'hirsi Hamza

M'hirsi Hamza

Cyber Security Architect at Rakuten Symphony Deutschland, talks about #innovation, #technology, #cyberattack, #cyberdefense, and #cybersecurity

Following

Help
Status
About
Careers
Blog
Privacy
Terms
Text to speech
Teams