---
title: "Hemant Sharma (@hemant-cybersec) | Hashnode"
description: "Aspiring SOC Analyst | Threat Hunting, Endpoint Triage & PowerShell Automation. Read the latest articles by Hemant Sharma on Hashnode."
url: "https://hashnode.com/@hemant-cybersec"
---

@hemant-cybersec

# Hemant Sharma

@hemant-cybersec · Delhi, India · Joined July 2026

Aspiring SOC Analyst | Threat Hunting, Endpoint Triage & PowerShell Automation

[Website](https://www.credly.com/users/hemant-sharma.b378d711)

### [One Click, Four Layers: What Actually Happens When You Visit a Website](https://hemant-cybersec.hashnode.dev/one-click-four-layers?utm_source=hashnode&utm_medium=feed)

Follow one request from keystroke to page: DHCP, DNS, TCP, HTTP and TLS explained — then decrypted live in Wireshark. A beginner-friendly tour.

5 min read · [hemant-cybersec.hashnode.dev](https://hemant-cybersec.hashnode.dev/one-click-four-layers?utm_source=hashnode&utm_medium=feed)

[Oct 4](https://hashnode.com/posts/one-click-four-layers/6ac24e00d2a41e65aff0b934)

### [Building an Automated Linux SOC Triage Script with Bash](https://hemant-cybersec.hashnode.dev/building-an-automated-linux-soc-triage-script-with-bash?utm_source=hashnode&utm_medium=feed)

📌 Introduction When responding to a potential Linux endpoint compromise, every second counts. Manually inspecting authentication logs, active socket states, running processes, and cron jobs across mu

3 min read · [hemant-cybersec.hashnode.dev](https://hemant-cybersec.hashnode.dev/building-an-automated-linux-soc-triage-script-with-bash?utm_source=hashnode&utm_medium=feed)

[Aug 6](https://hashnode.com/posts/building-an-automated-linux-soc-triage-script-with-bash/6a74aae05a1f14c038e7ec2d)

### [Building an Automated SOC Endpoint Triage Script with PowerShell](https://hemant-cybersec.hashnode.dev/building-an-automated-soc-endpoint-triage-script-with-powershell?utm_source=hashnode&utm_medium=feed)

📌 Introduction During a security incident or host investigation, speed and accuracy are everything for a SOC analyst. Manually checking running processes, network connections, installed patches, and

3 min read · [hemant-cybersec.hashnode.dev](https://hemant-cybersec.hashnode.dev/building-an-automated-soc-endpoint-triage-script-with-powershell?utm_source=hashnode&utm_medium=feed)

[Aug 5](https://hashnode.com/posts/building-an-automated-soc-endpoint-triage-script-with-powershell/6a736ad461fefbcc63257a8e)

### [Mastering Windows Host Security & Active Directory Mechanics: A SOC Analyst's Defensive Guide](https://hemant-cybersec.hashnode.dev/mastering-windows-host-security-active-directory-mechanics-a-soc-analyst-s-defensive-guide?utm_source=hashnode&utm_medium=feed)

📌 Introduction In modern enterprise environments, Microsoft Windows and Active Directory (AD) form the core identity and endpoint infrastructure. For Security Operations Center (SOC) analysts, monito

8 min read · [hemant-cybersec.hashnode.dev](https://hemant-cybersec.hashnode.dev/mastering-windows-host-security-active-directory-mechanics-a-soc-analyst-s-defensive-guide?utm_source=hashnode&utm_medium=feed)

[Aug 2](https://hashnode.com/posts/mastering-windows-host-security-active-directory-mechanics-a-soc-analyst-s-defensive-guide/6a6f496e3ccde36c6265e01a)

### [Mastering Linux Mechanics for Threat Hunting and SOC Operations: A Hands-on Guide](https://hemant-cybersec.hashnode.dev/mastering-linux-mechanics-for-threat-hunting-and-soc-operations-a-hands-on-guide?utm_source=hashnode&utm_medium=feed)

A practical guide for SOC analysts on Linux file systems, process tracking, permissions, and log analysis.

4 min read · [hemant-cybersec.hashnode.dev](https://hemant-cybersec.hashnode.dev/mastering-linux-mechanics-for-threat-hunting-and-soc-operations-a-hands-on-guide?utm_source=hashnode&utm_medium=feed)

[Jul 31](https://hashnode.com/posts/mastering-linux-mechanics-for-threat-hunting-and-soc-operations-a-hands-on-guide/6a6cb02e27a9d24ab3314319)