CCF - Bridging the gap between academia and the cybersecurity industry
Akure, Nigeria
Joined August 2023
- Tweets599
- Following10
- Followers377
- Likes396
Pinned Tweet
A LITTLE UPDATE 🔥
Due to the number of participants and the technical depth of the training, we’re extending the bootcamp to 6 Weeks And we’re moving the start date by one week to give our team enough time to prepare and make the most of the extended training ❤️.
#CCFBootcamp
Cyber Career Fair retweeted
The second was to tell a story from the Wazuh environment telling about a sus. Account creation and escalation to admin privileges. And still comparing the telemetry and visibility gaps..
Details on GitHub.#CCFBootcamp
#CCFSOCAccelerator
@ccfairfuta @thariskyjohn @Dstixx05
Cyber Career Fair retweeted
Looking at things little by little to understand the whole's been working for me recently learning cybersec.
But then technical problems I been facing too are really pushing me to do better.
Beginning to believe in my PC😅
Cyber Career Fair retweeted
Week 2 with CCF was really tasking for me..
Battling with re-setting up my SOC lab to team work to making sure my labs are stable enough to work on 8gb and also having my laptop not too slow...
Lot of work for me... Let's talk about what the task was in a brief..
Cyber Career Fair retweeted
Week 2 of the SOC Accelerator Program with @ccfairfuta started with a simple task: build a SIEM lab with Wazuh.
Easy enough, right? Until my laptop ran out of space, Wazuh threw errors, and my Ubuntu server broke. I had to start all over again. 😭
Cyber Career Fair retweeted
National Cybersecurity Awareness Month
NCSAM IN LOVE (Day 27)
Couple’s Edition - Part 2
“Is my babe cyber safe”
“Is your babe cyber safe”
Red flags in babe? Yes or no
This is strictly for lovers
But if you are single, SORRY, you can play with your friends😂 🤲
Cyber Career Fair retweeted
One thing I'm learning with Team Vector is that deploying a SIEM is only part of the job.
We need to ensure the right logs are collected, verify that events are visible, and investigate the evidence before drawing conclusions.
@ccfairfuta #CCFBootcamp #CCFSOCAccelerator #Wazuh
Cyber Career Fair retweeted
Last week, my team and I worked on telemetry and log collection using Wazuh as part of the @ccfairfuta SOC Bootcamp.
Our focus was on understanding how endpoint activities generate logs and how we can use that evidence during security investigations. 🔍
Walk with me
Cyber Career Fair retweeted
National Cybersecurity Awareness Month
NCSAM IN LOVE (Day 25)
Couple’s Edition
“Is my babe cyber safe”
“Is your babe cyber safe”
This is strictly for lovers
But if you are single, SORRY, you can play with your friends😂 🤲
More episodes coming up soon!
Cyber Career Fair retweeted
My babe got her first tech pay today and she’s happy like!!!
Mesef just Dey beside am, Proud husband moment 😂🤲🏿
Make she con go flex me small
N.B: Bring your data analysis gig abeg 🤲🏿🤲🏿
She go do am for you
Using these tools, you are one step ahead, always ✨
#CCFBootcamp
#CCFSOCAccelerator
Every action on a network leaves a trail whether logins, file access, failed attempts, all of it .
That's where log analysis comes in. SOC analysts examine this data to spot the small red flags before they turn into major incidents.
#CCFBootcamp
#CCFSOCAccelerator
CCF SOC Bootcamp Breakout is happening! 🔥
Join us on X-Space as we talk about the journey from learning SOC skills to pitching them with confidence.
Set your reminders: teapawt.net/i/spaces/1kJzDPjWoBdKv
#CCFBootcamp
#CCFSOCAccelerator
Your systems are constantly generating security events.
Are you paying attention to them?
What would you want your security monitoring system to alert you about? Drop it in the comment section.
#CCFBootcamp
#CCFSOCAccelerator
Ever wonder how SOC analysts catch threats in seconds instead of days?
Meet SIEM.
It pulls in logs from every corner of a network, spots the patterns that matter, and alerts analysts before small issues become big problems.
#CCFBootcamp
#CCFSOCAccelerator
Cyber Career Fair retweeted
No telemetry, no visibility. No visibility, no investigation.
If you don't have enough data, you would not have enough clues on what to investigate when an incident occurs. This was the core theme of Week 2 at the CCF SOC bootcamp, which focused on building visibility and getting enough telemetry.
A few key highlights I learnt from the session:
Telemetry: The automated collection of data from different endpoint sources as they operate.
SIEM: The importance of these tools in correlating events, centralizing logs, and solving data scaling problems.
Wazuh tool: The introduction to Wazuh, an open source SIEM platform for active threat detection.
We were also split into Breakout rooms where my team had to discuss telemetry sources for a complex, real world scenario.
My team has been assigned our next hands-on project based on this, so stay tuned for my upcoming project documentation.
#Cybersecurity #BlueTeam #SOCBootcamp #SIEM #Wazuh
Think you know your SOC basics?
Let's test it
Drop your answer in the comments👇.
#CCFBootcamp
#CCFSOCAccelerator
A good documentary 👏🏾
Now you know what we’ve been up to at the CCF SOC Accelerator Bootcamp🤭
You cannot determine what is suspicious without deeply understanding what a completely normal activity looks like.
Last week, I took a massive step forward in my cybersecurity goals by joining the Security Operations Centre (SOC) bootcamp run by Cyber Career Fair (CCF).
Paired with an incredible team, we built an isolated three-node IT lab environment, generated controlled activity, analyzed resulting evidence, and carried out security monitoring.
To keep our environment safe and isolated, we configured each machine's network adapter to host-only mode.
Here is a breakdown of our project:
1. We deployed Windows VM (as our endpoint), Kali-Linux VM (as our controlled security testing node), and an Ubuntu server (as our administrative server) and we verified connectivity using ping.
2. We monitored running services, expected logins, and active processes on the Windows VM to determine what a normal baseline looks like.
3. We put the Principle of Least Privileged and Role Based Access Control(RBAC) into action on our Ubuntu server. We created users, group, tested group memberships, assigned strict directory permissions, and deliberately performed normal logins and controlled failed logins. We analyzed the evidence of our activities on the both VMs based on the logs.
4. We also used Wireshark to capture baseline network traffic like ICMP, DNS, SSH, and HTTP, while identifying the source or destination IP.
5. Using Kali-Linux VM, we ran a controlled Nmap port scan and simulated SSH password brute-force attack against our Ubuntu users account to capture the attack evidence.
6. We compared our baseline during normal system operation against the traffic captured after the simulated attack.
This project made me realize that, unusual activity does not automatically mean a malicious attack and evidences does not prove a successful compromise. As an analysts, true detection requires correlating timestamps, source addresses, and connection outcomes.
#Cybersecurity #SOCAnalyst #HandsonSOCproject
Cyber Career Fair retweeted
In Week 1 of my SOC bootcamp, the project was to build an environment that shows what “normal” looks like in a small organization.
I set up my own lab with three machines: a Windows 10 endpoint, an Ubuntu Linux server, and a Kali Linux admin machine....
github.com/Glow-cyber/Team-S…
First exposure to team work in the cybersecurity field or a preview 😄
The last week's been interesting starting with the SOC Bootcamp by @ccfairfuta .
Having to try out new stuffs is but exciting and exhausting. Documentation update would come in later
