Personal writeups documenting my learning process in blue team operations, digital forensics, and incident response (DFIR), primarily working through CyberDefenders Blue Team CTF challenges.
I'm an IT diploma student building hands-on experience toward a career in DFIR / security analysis. This repo is where I document each challenge I complete — the tools I used, the reasoning behind each step, and what I learned. Screenshots and packet/file evidence are included alongside each writeup for reference.
Disclaimer: These writeups are for educational purposes only. All analyses were conducted in legal, authorized CyberDefenders training environments. No systems were harmed or accessed without permission.
cyberdefenders-writeups/
├── network-forensics/
│ ├── danabot/
│ │ ├── writeup.md
│ │ └── images/
│ └── xlmrat/
│ ├── writeup.md
│ └── images/
├── malware-analysis/
├── threat-intel/
├── endpoint-forensics/
├── cloud-forensics/
├── detection-engineering/
└── threat-hunting/
Each challenge gets its own folder containing a writeup.md and an images/ directory with supporting screenshots.
| Challenge | Category | Difficulty | Link |
|---|---|---|---|
| DanaBot | Network Forensics | Easy | writeup |
| XLMRat | Network Forensics | Easy | writeup |
(More to be added as challenges are completed.)
Writeup text and analysis © Lee Yu Hao. Screenshots are excerpts from CyberDefenders challenge material, used for educational/commentary purposes.