--- title: "ridesh raju bijwe (@rideshcyber) | Hashnode" description: "Documenting my journey into Cybersecurity and SOC Analysis. Read the latest articles by ridesh raju bijwe on Hashnode." url: "https://hashnode.com/@rideshcyber" --- @rideshcyber # ridesh raju bijwe @rideshcyber · pune India · Joined December 2025 Documenting my journey into Cybersecurity and SOC Analysis. ### [Building My First SOC Home Lab with Windows & Kali Linux Using Oracle VirtualBox](https://understanding-soc-as-a-learner.hashnode.dev/building-my-first-soc-home-lab-with-windows-kali-linux-using-oracle-virtualbox?utm_source=hashnode&utm_medium=feed) Learn how to build a SOC home lab with Windows and Kali Linux using Oracle VirtualBox. Configure virtual networking and create a foundation for SIEM. 8 min read · [understanding-soc-as-a-learner.hashnode.dev](https://understanding-soc-as-a-learner.hashnode.dev/building-my-first-soc-home-lab-with-windows-kali-linux-using-oracle-virtualbox?utm_source=hashnode&utm_medium=feed) [Sep 13](https://hashnode.com/posts/building-my-first-soc-home-lab-with-windows-kali-linux-using-oracle-virtualbox/6aa67b1f8fef56e08f12d0b8) ### [⭐ SOC250 – APT35 HyperScrape Data Exfiltration Tool Detected Walkthrough (EventID:212)](https://rideshcyber.hashnode.dev/soc250-apt35-hyperscrape-data-exfiltration-tool-detected-walkthrough-eventid-212?utm_source=hashnode&utm_medium=feed) Letsdefend Alert Walkthrough 4 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc250-apt35-hyperscrape-data-exfiltration-tool-detected-walkthrough-eventid-212?utm_source=hashnode&utm_medium=feed) [Mar 7](https://hashnode.com/posts/soc250-apt35-hyperscrape-data-exfiltration-tool-detected-walkthrough-eventid-212/69ab8dc45e2d42459184478a) ### [⭐ SOC173 – Follina 0-Day Detected Walkthrough (EventID:123)](https://rideshcyber.hashnode.dev/soc173-follina-0-day-detected-walkthrough-eventid-123?utm_source=hashnode&utm_medium=feed) Letsdefend Alert Walkthrough 4 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc173-follina-0-day-detected-walkthrough-eventid-123?utm_source=hashnode&utm_medium=feed) [Mar 4](https://hashnode.com/posts/soc173-follina-0-day-detected-walkthrough-eventid-123/69a872b53b896f7ad661619b) ### [⭐ SOC239 – Remote Code Execution Detected in Splunk Enterprise Walkthrough (EventID: 201)](https://rideshcyber.hashnode.dev/soc239-remote-code-execution-detected-in-splunk-enterprise-walkthrough-eventid-201?utm_source=hashnode&utm_medium=feed) Letsdefend Alert Walkthrough 5 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc239-remote-code-execution-detected-in-splunk-enterprise-walkthrough-eventid-201?utm_source=hashnode&utm_medium=feed) [Mar 2](https://hashnode.com/posts/soc239-remote-code-execution-detected-in-splunk-enterprise-walkthrough-eventid-201/69a4f6731a91160b9f6cdbe5) ### [SOC168 – Whoami Command Detected in Request Body Walkthrough (EventID:118)](https://rideshcyber.hashnode.dev/soc168-whoami-command-detected-in-request-body-walkthrough-eventid-118?utm_source=hashnode&utm_medium=feed) Letsdefend Alert Walkthrough 4 min read · [rideshcyber.hashnode.dev](https://rideshcyber.hashnode.dev/soc168-whoami-command-detected-in-request-body-walkthrough-eventid-118?utm_source=hashnode&utm_medium=feed) [Feb 28](https://hashnode.com/posts/soc168-whoami-command-detected-in-request-body-walkthrough-eventid-118/69a2a387d4053a09f38ee71f)