https://coreyfarley.com/tags/incident-response/ Recent content in Incident Response on Corey Farley Hugo en-us Mon, 20 Oct 2025 00:00:00 +0000 https://coreyfarley.com/posts/groundworm-htb/ Mon, 20 Oct 2025 00:00:00 +0000 https://coreyfarley.com/posts/groundworm-htb/ A walkthrough of GroundWorm, a hard-rated DFIR Sherlock on HackTheBox, tracing a simulated APT attack from initial access through ransomware deployment using Splunk and API Monitor.