thespicystories

@ayesha-sana

Notes, Labs & Lessons from My Cybersecurity Journey

PakistanJoined June 2026

About

Cybersecurity enthusiast documenting labs, notes, and hands-on learning while building practical skills in SOC operations, threat detection, and security analysis.

Available for

Open to SOC Analyst internships, cybersecurity trainee roles, blue team opportunities, and collaborations that help me gain hands-on experience in security operations and threat detection.

thespicystories's blogs

How I Investigated a Multi-Stage Phishing Attack in a Simulated SOC Environmentayesha-sana.hashnode.dev2 posts

Articles Comments

Recently published

Tthespicystoriesayesha-sana.hashnode.dev10h ago · 8 min read

How I Identified an Infected Host Using Only a PCAP File

How I Identified an Infected Host Using Only a PCAP File A SIEM alert came in showing multiple hits for NetSupport Manager RAT. All of it pointed to one IP — 45.131.214[.]85 — over TCP port 443. The a

0

Tthespicystoriesayesha-sana.hashnode.dev2d ago · 6 min read

How I Investigated a Multi-Stage Phishing Attack in a Simulated SOC Environment

Investigating a Phishing Attack in a SOC Environment: Email Analysis, PowerShell Reconnaissance, and Suspicious DNS Activity Introduction Every alert tells a story. Some alerts turn out to be false po

0

thespicystories

About

Available for

thespicystories's blogs

Recently published

How I Identified an Infected Host Using Only a PCAP File

How I Investigated a Multi-Stage Phishing Attack in a Simulated SOC Environment

Search Hashnode

thespicystories

About

Available for

thespicystories's blogs

Recently published

How I Identified an Infected Host Using Only a PCAP File

How I Investigated a Multi-Stage Phishing Attack in a Simulated SOC Environment