---
title: "Discussion on \"Windows Endpoint Analysis Challenge 1 | SOC 101 | TCM Security\" | Hashnode"
description: "Discussion on \"Windows Endpoint Analysis Challenge 1 | SOC 101 | TCM Security\". Tracing malware behavior step-by-step —\nfrom network connections and process creation\nto persistence in registry and services."
url: "https://hashnode.com/posts/windows-endpoint-analysis-challenge-1-soc-101-tcm-security/68f0cf0f56464457d3e18e7f"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Windows Endpoint Analysis Challenge 1 | SOC 101 | TCM Security](https://bit01net.hashnode.dev/windows-endpoint-analysis-challenge-1-soc-101-tcm-security?utm_source=hashnode&utm_medium=feed)

Tracing malware behavior step-by-step — from network connections and process creation to persistence in registry and services.

Oct 16, 2025 · 4 min read · bit01net.hashnode.dev  
Updated Jun 2  
Read the article

-   [#malware-detection](https://hashnode.com/tag/malware-detection)
-   [#persistence](https://hashnode.com/tag/persistence)
-   [#soc](https://hashnode.com/tag/soc)
-   [#soc-analyst](https://hashnode.com/tag/soc-analyst)
-   [#tcm-security](https://hashnode.com/tag/tcm-security)

## Written by

[Umamaheswari B](https://hashnode.com/@amU01)

@amU01 · India

  
[View profile](https://hashnode.com/@amU01)

SOC Analyst | CDSA | PJPT | CEH | Security+

👋Hi, I’m Umamaheswari Through this blog, I share visual walkthroughs and hands-on investigations on PCAP, phishing, Splunk, ELK, malware, and digital forensics—based on labs from TryHackMe, HackTheBox and CyberDefenders. Feel free to connect or ask questions — I am more happy to help.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.