Otávio Alves

2 posts

soc analyst on the blue team side, threat detection and incident response.

> posts

2026-01-25 10 min

SOC338: Lumma Stealer e DLL side-loading via Click Fix

SOC338 no Let's Defend: Lumma Stealer entregue por Click Fix phishing, mshta e PowerShell, com carregamento lateral de DLL. Análise do alerta do EDR ao C2.

blue-team C2 defense-evasion dll-side-loading

2025-12-21 9 min

[notes]

SOC335: CVE-2024-49138 explorada no CLFS do Windows

SOC335 no Let's Defend: detectando a exploração da CVE-2024-49138 no driver CLFS do Windows, do alerta do EDR à escalação de privilégio.

blue-team C2 CVE-2024-49138 defense-evasion