SSunnyincybersecurity-learning.hashnode.dev·5d ago · 16 min readTryHackMe OWASP Top 10 2025: IAAA Failures Beginner-Friendly Learning GuideIntroduction I recently completed the OWASP Top 10 2025: IAAA Failures room on TryHackMe as part of my ongoing cybersecurity learning journey. The OWASP Top 10 is one of the most important learning re00
SSunnyincybersecurity-learning.hashnode.dev·Jul 21 · 13 min readTryHackMe Defensive Security Intro Beginner-Friendly Learning GuideIntroduction I recently completed the Defensive Security Intro room on TryHackMe as part of my ongoing cybersecurity learning journey. Cybersecurity is not only about attacking systems or finding vuln00
SSunnyincybersecurity-learning.hashnode.dev·Jul 12 · 16 min readTryHackMe SOC Role in Blue Team Beginner-Friendly Learning Guide Introduction I recently completed the SOC Role in Blue Team room on TryHackMe as part of my ongoing cybersecurity learning journey. After learning the basics of Security Operations Center concepts, th00
SSunnyincybersecurity-learning.hashnode.dev·Jul 10 · 13 min readTryHackMe SOC Fundamentals Beginner-Friendly Learning GuideIntroduction I recently completed the SOC Fundamentals room on TryHackMe as part of my ongoing cybersecurity learning journey. A Security Operations Center, commonly known as a SOC, is one of the most00
JJJaewook Junginwoogi.me·Jun 23 · 9 min readMalware Analysis FundamentalsWhen a hash hits VirusTotal with one detection out of seventy, that's not enough to call it malicious. When it hits zero, that's also not enough to call it clean. Malware analysis is the work that fil00
JJJaewook Junginwoogi.me·Jun 6 · 8 min readThreat Hunting MethodologyMost security tools are reactive. Alerts fire after a rule matches, and analysts triage. Threat hunting flips that: you assume something has already evaded the tools, and you go look for it. This post00
JJJaewook Junginwoogi.me·May 25 · 8 min readWireshark: Traffic Analysis for IRWhen a Snort alert fires or a NetFlow anomaly surfaces, the next question is always the same: what actually happened on the wire? Wireshark is the answer most blue teamers reach for. This post is a wo10
JJJaewook Junginwoogi.me·May 18 · 7 min readNetwork Security: IDS/IPS and SnortNetwork defense splits cleanly into two questions: what gets through the perimeter, and what do you do when something does? This post covers the second question. IDS, IPS, the detection techniques beh00
JJJaewook Junginwoogi.me·May 16 · 9 min readFrom FIX Sessions to SIEM Alerts: A Pre-SOC Career on the Trading DeskI'm not a SOC analyst yet. I'm a Master of Cybersecurity student at RMIT, transitioning from a four-year career on a Korean securities trading desk where I owned the FIX-protocol connections to overse00
RRridesh raju bijweinrideshcyber.hashnode.dev·Feb 22 · 4 min readSOC164 – Suspicious Mshta Behavior Walkthrough (EventID:114)Today we’re investigating another LetsDefend alert: SOC164 – Suspicious Mshta Behavior This alert focuses on detecting suspicious usage of a legitimate Windows binary often abused by attackers. 🔎 Al00
