What EDR Reveals After a Suspicious Document OpensFollow the evidence from the first alert to the downloaded file, and learn how EDR helps determine what ran, what stopped, and what remains uncertain.6 min read·tirthaklikhar.hashnode.devSep 28
Climbing the Pyramid of Pain: From Hashes to TTP-Based DetectionWhat TryHackMe Summit teaches beginner SOC analysts about building detections attackers cannot easily evade22 min read·tirthaklikhar.hashnode.devSep 11
SOC Team Internals: How an L1 Analyst Thinks, Triages and ReportsEverything an L1 SOC analyst needs: alert triage, Five Ws reporting, workbooks, MTTD, MTTA, MTTR and FPR explained.12 min read·tirthaklikhar.hashnode.devMay 31
Why the OSI Model Diagram in Your Textbook Is IncompleteThe OSI diagram in your textbook is incomplete. Walk a PDF through all 7 layers and finally understand how networks work.9 min read·tirthaklikhar.hashnode.dev1May 25
TryHackMe SEC1 Certification: A Honest, Detailed ReviewPassed TryHackMe SEC1 on the first attempt. Here is what the exam tests, where it is hard, and whether it belongs in your certification plan.11 min read·tirthaklikhar.hashnode.devMay 7
