This investigation picks up where the previous Windows forensics rooms left off, but pushes significantly deeper into the attacker's post-exploitation playbook. Rather than relying on obvious ...

This is my curated, hands-on roadmap for beginners who want to become job-ready Junior Security Analysts or Junior Penetration Testers. I built and updated this guide to reflect the 2025–2026 ...

We covered network analysis and forensics on Windows using Powershell and CMD. We analyzed an infected machine making network connections to C2 server and we discovered a malicious process ...

In this module TryHackMe teaches the student how to utilize Xpath queries within Windows Powershell to parse data from Windows Event Logs. Using Get-WinEvent and XPath, what is the query to find WLMS ...