File Hashes Analysis with Power BI from Data Stored in DShield SIEM, (Wed, Mar 12th)

The author explains how they exported 60 days of honeypot/SIEM data from Kibana into Power BI to visualize activity and identify malicious artifacts; the analysis surfaces repeated uploads from specific IPs, filenames and hashes tied to RedTail cryptomining malware, Xorddos, and an IRCBot, and emphasizes that exporting large datasets can reveal otherwise overlooked indicators for retrospective hunting.