Muhammad Abdullah (@m-abd)

SOC205 | Malicious Macro Has Been Executed

Platform: LetsDefend Date Investigated: February 28, 2024 Severity: Medium Verdict: True Positive ✅ Actions Taken: Endpoint contained Summary A malicious Word document disguised as an invoice was deli

Aug 5 · 5 min readshiplog.hashnode.dev

SOC176 | RDP Brute Force Detected

Platform: LetsDefend Date Investigated: March 07, 2024 Severity: Medium Verdict: True Positive ✅ Actions Taken: Endpoint contained Summary On March 7, 2024 at 11:44 AM, an alert fired after multiple f

Aug 5 · 4 min readshiplog.hashnode.dev

SOC338 | Lumma Stealer, DLL Side-Loading via ClickFix Phishing

Platform: LetsDefend Date Investigated: March 13, 2025 Severity: Critical Category: Data Leakage Verdict: True Positive ✅ Actions Taken: Email deleted, endpoint contained Summary A phishing email impe

Aug 5 · 5 min readshiplog.hashnode.dev

Coming Back to Writing = and My First Cybersecurity Project

It's been a while since I've written anything publicly. I used to be fairly active documenting what I was building as a developer, and somewhere along the way - between shipping products and then pivo

Jul 28 · 4 min readshiplog.hashnode.dev

Second Project Back: A Phishing Email Analyzer (Still a Beginner, Still Learning)

A little while ago I wrote about coming back to documenting my work after a long quiet stretch, starting with a small IOC enrichment tool. This is the next entry in that same habit — a phishing email

Jul 28 · 5 min readshiplog.hashnode.dev

Muhammad Abdullah

About

Available for

Muhammad Abdullah's blogs

SOC205 | Malicious Macro Has Been Executed

SOC176 | RDP Brute Force Detected

SOC338 | Lumma Stealer, DLL Side-Loading via ClickFix Phishing

Coming Back to Writing = and My First Cybersecurity Project

Second Project Back: A Phishing Email Analyzer (Still a Beginner, Still Learning)

Muhammad Abdullah

About

Available for

Muhammad Abdullah's blogs

SOC205 | Malicious Macro Has Been Executed

SOC176 | RDP Brute Force Detected

SOC338 | Lumma Stealer, DLL Side-Loading via ClickFix Phishing

Coming Back to Writing = and My First Cybersecurity Project

Second Project Back: A Phishing Email Analyzer (Still a Beginner, Still Learning)

Muhammad Abdullah

About

Available for

Muhammad Abdullah's blogs

SOC205 | Malicious Macro Has Been Executed

SOC176 | RDP Brute Force Detected

SOC338 | Lumma Stealer, DLL Side-Loading via ClickFix Phishing

Coming Back to Writing = and My First Cybersecurity Project

Second Project Back: A Phishing Email Analyzer (Still a Beginner, Still Learning)

Search Hashnode

Muhammad Abdullah

About

Available for

Muhammad Abdullah's blogs

SOC205 | Malicious Macro Has Been Executed

SOC176 | RDP Brute Force Detected

SOC338 | Lumma Stealer, DLL Side-Loading via ClickFix Phishing

Coming Back to Writing = and My First Cybersecurity Project

Second Project Back: A Phishing Email Analyzer (Still a Beginner, Still Learning)