---
title: "Jebitok (@w1t3r) | Hashnode"
description: "Software Developer * Cyber security Research * Open for roles. Read the latest articles by Jebitok on Hashnode."
url: "https://hashnode.com/@w1t3r"
---

@w1t3r

# Jebitok

@w1t3r · Kenya · Joined August 2020

Software Developer \* Cyber security Research \* Open for roles

### [Quiet as the Grave: A Threat Hunt Case Study (TryHackMe SOC)](https://www.sharonjebitok.com/quiet-as-the-grave-a-threat-hunt-case-study-tryhackme-soc?utm_source=hashnode&utm_medium=feed)

What this is Quiet as the Grave is a TryHackMe threat-hunting scenario, again set at TryHatMe Studios. Unlike an alert-driven SOC queue, a hunt starts from a hypothesis, not an alert: threat intellige

6 min read · [sharonjebitok.com](https://www.sharonjebitok.com/quiet-as-the-grave-a-threat-hunt-case-study-tryhackme-soc?utm_source=hashnode&utm_medium=feed)

[3d ago](https://hashnode.com/posts/quiet-as-the-grave-a-threat-hunt-case-study-tryhackme-soc/6af4b70cfe42279bc52ba7a2)

### [Repossessed (TryHackMe SOC Simulator): Case Report Record](https://www.sharonjebitok.com/repossessed-tryhackme-soc-simulator-case-report-record?utm_source=hashnode&utm_medium=feed)

Link to the SOC Simulator on TryHackMe Scenario: TryHatMe Studios, launch of the NeuralNexus platformer. A Marketing workstation spawns a process it should not. 9 alerts, simulated environment. Clock

7 min read · [sharonjebitok.com](https://www.sharonjebitok.com/repossessed-tryhackme-soc-simulator-case-report-record?utm_source=hashnode&utm_medium=feed)

[3d ago](https://hashnode.com/posts/repossessed-tryhackme-soc-simulator-case-report-record/6af4b095c7bf7fda367e18d5)

### [The O365 Intrusion - Splunk (TryHackMe)](https://www.sharonjebitok.com/the-o365-intrusion-splunk-tryhackme?utm_source=hashnode&utm_medium=feed)

Link to the O365 Intrusion on TryHackMe Active investigation High Situation Report Vantage Dynamics' IT team escalated a report from their Accounts Payable department on 27 August. An employee, Marc

5 min read · [sharonjebitok.com](https://www.sharonjebitok.com/the-o365-intrusion-splunk-tryhackme?utm_source=hashnode&utm_medium=feed)

[Oct 26](https://hashnode.com/posts/the-o365-intrusion-splunk-tryhackme/6adf26a5a268e996cf68ac0d)

### [The Finance Trail - Splunk (TryHackMe)](https://www.sharonjebitok.com/the-finance-trail-splunk-tryhackme?utm_source=hashnode&utm_medium=feed)

Link to the Finance Trail challenge on TryHackMe Case Briefing The numbers do not add up. You have been brought on at THM Security Services (TSS). Click the card below to reveal your role on this case

7 min read · [sharonjebitok.com](https://www.sharonjebitok.com/the-finance-trail-splunk-tryhackme?utm_source=hashnode&utm_medium=feed)

[Oct 26](https://hashnode.com/posts/the-finance-trail-splunk-tryhackme/6adf0b1f7c31f4483f1267f6)

### [Benign - Splunk (TryHackMe)](https://www.sharonjebitok.com/benign-splunk-tryhackme?utm_source=hashnode&utm_medium=feed)

Link to Benign challenge on TryHackMe Introduction We will investigate host-centric logs in this challenge room to find suspicious process execution. To learn more about Splunk and how to investigate

3 min read · [sharonjebitok.com](https://www.sharonjebitok.com/benign-splunk-tryhackme?utm_source=hashnode&utm_medium=feed)

[Oct 26](https://hashnode.com/posts/benign-splunk-tryhackme/6adefee27374d2cffa16e090)