4404 Founders12h ago · 10 min readMDR vs MSSP: Which One Does Your Business NeedThe 2026 edition of Gartner's Market Guide for MDR changed the definition: MDR now means "remotely delivered, AI-augmented, human-led, turnkey, modern SOC functions." That added "AI-augmented" qualifi404-founders.com
JJebitok3d ago · 7 min readThe Finance Trail - Splunk (TryHackMe)Link to the Finance Trail challenge on TryHackMe Case Briefing The numbers do not add up. You have been brought on at THM Security Services (TSS). Click the card below to reveal your role on this casesharonjebitok.com
JJebitok3d ago · 5 min readThe O365 Intrusion - Splunk (TryHackMe)Link to the O365 Intrusion on TryHackMe Active investigation High Situation Report Vantage Dynamics' IT team escalated a report from their Accounts Payable department on 27 August. An employee, Marcsharonjebitok.com
JJebitok3d ago · 3 min readBenign - Splunk (TryHackMe)Link to Benign challenge on TryHackMe Introduction We will investigate host-centric logs in this challenge room to find suspicious process execution. To learn more about Splunk and how to investigate sharonjebitok.com
SStudy4Pass6d ago · 7 min readCompTIA CySA+ (CS0-003): The Analyst Exam That Grades Your Detective WorkSecurity+ gets you into the SOC. CySA+ is the exam that proves you belong there. The CompTIA Cybersecurity Analyst certification (CS0-003, current since June 2023) sits in the exact middle of the bluestudy4pass-blog.hashnode.dev
VviditOct 22 · 19 min readPHP2Shell: Two Critical PHP Flaws That Could Turn a Website Into an Attacker’s Entry PointThe Internet Has a PHP Problem Imagine visiting your favourite website, logging into your account, or making an online payment. Everything looks normal. There is no suspicious download, no malicious aviditp.hashnode.dev
HHazel ChirindaOct 20 · 12 min readFrom Alert to Answer: Turning Security Flags into FactsIn cybersecurity, alerts are part of everyday work. A user signs in from an unfamiliar location. An endpoint protection tool detects suspicious activity. An email security platform flags a potentiallyhazelsec.hashnode.dev
SshadowsongOct 15 · 6 min readInside a SOC: What Happens After a Security Alert Is Triggered?Once a security alert comes into a Security Operations Center (SOC), the investigation is just starting. An alert could be a suspicious sign-in, a malicious application is running, unfamiliar connectishadowsec.hashnode.dev
AakramOct 3 · 13 min readSOC 2 Compliance for Software: How to Evaluate PartnersSOC 2 compliance for software means a software company or IT services provider has defined, implemented, and documented controls that protect customer data and systems, usually against the Security tr76MASesparksit.hashnode.dev
ZZero Trust ThreadsSep 30 · 7 min readAn Alert Fired. Now What?You open a security dashboard. There it is. HIGH SEVERITY ALERT Red. Bold. Urgent-looking. So what do you do? For someone new to defensive cybersecurity, alerts can feel like answers. They are not. Azerotrustthreads.hashnode.dev
