What Actually Happens After a “Suspicious Login” SOC Alert

I’m a cybersecurity student with hands-on experience across both defensive (blue team) and offensive (red team) security. My primary interests include SOC operations, OSINT, digital forensics, and practical penetration testing — with a focus on understanding how real-world attacks are executed, detected, and investigated. I’ve worked on security projects and assessments involving reconnaissance, vulnerability identification, exploitation workflows, and reporting, along with defensive analysis such as alert triage and incident investigation. I hold industry-recognized certifications and actively participate in CTFs, where I focus on OSINT, forensics, networking, and web exploitation. This blog documents my technical writeups, methodologies, and lessons learned while solving security problems, bridging the gap between red-team techniques and blue-team detection.