Tag feed

#soc-analyst

104 posts8 followers

Explore Hashnode

Alternatives

Trending tags this week

SSunnycybersecurity-learning.hashnode.dev8h ago · 15 min read

🛡️ TryHackMe — SOC L1 Alert Reporting | Learning Guide

Spoiler-Free Learning Guide: This article contains no TryHackMe flags, dashboard-specific answers, usernames, phishing answers, or escalation-task solutions. It focuses on the reporting, escalation, a

0

SSunnycybersecurity-learning.hashnode.dev1d ago · 18 min read

🛡️ TryHackMe — SOC L1 Alert Triage | Learning Guide

Spoiler-Free Learning Guide: This article contains no TryHackMe flags, dashboard-specific answers, usernames, alert-answer submissions, or final verdict solutions. It focuses on the SOC methodology, a

0

JJebitoksharonjebitok.com3d ago · 2 min read

Detection and Analysis (TryHackMe)

Link to the challenge on TryHackMe: Detection and Analysis Introduction Detection and Analysis on TryHackMe puts you in the seat of an incident responder investigating a suspected business email compr

0

JJebitoksharonjebitok.com3d ago · 17 min read

Preparation (TryHackMe)

Link to the walkthrough on TryHackMe: Preparation Introduction The Preparation phase is the foundation of every effective incident response capability. Before an organization can detect, contain, or r

0

JJebitoksharonjebitok.com4d ago · 5 min read

The Blue Team Perspective (TryHackMe)

Link to the Challenge on TryHackMe: The Blue Team Perspective index=botsv1 | stats count by sourcetype index=botsv1 sourcetype=fgt_utm subtype=ips | stats count by srcip | sort -count | head 1 i

0

SSunnycybersecurity-learning.hashnode.devAug 25 · 6 min read

TryHackMe Blaster Beginner-Friendly Learning Guide

Introduction I recently completed the Blaster room on TryHackMe as part of my ongoing cybersecurity learning journey. Unlike purely theoretical or network-level rooms, Blaster offers a complete hands-

0

SSunnycybersecurity-learning.hashnode.devAug 19 · 22 min read

TryHackMe Network Security Essentials Beginner-Friendly Learning Guide

Introduction I recently completed the Network Security Essentials room on TryHackMe as part of my ongoing cybersecurity learning journey. This room was different from many beginner CTF-style rooms bec

0

MM1Hm1h.hashnode.devAug 14 · 13 min read

Threat Hunting & Splunk Analysis: Investigating a data leak

Objective: My following write up for this challenge is a resource that covers how a SOC analyst operates, it combines my personal investigation along with: Learning Splunk: SPL across Sysmon and Windo

0

GOGaetano Osurgaetano-osur.hashnode.devAug 13 · 5 min read

Windows Registry: The Other Half of the Process Story

In my last post, Windows Processes: A SOC Analyst's Guide, I wrote about learning the "family tree" of Windows processes, and how knowing what normal looks like makes the abnormal jump out at you. Wha

0

DMDurga Madhav Chandra Vemulapallidurgamadhav.hashnode.devAug 10 · 11 min read

Why 'Close Enough' Fails in Cyber Threat Intelligence — Lessons from MITRE ATT&CK, MISP, and YARA

This Week in Numbers 🧩 7 CTI frameworks and tools covered — Pyramid of Pain, Cyber Kill Chain, Unified Kill Chain, Diamond Model, MITRE ATT&CK, MISP/OpenCTI, YARA 🕵️ 4 practical rooms worked end-t

0

#soc-analyst

Search Hashnode

#soc-analyst

Explore Hashnode

Trending tags this week

🛡️ TryHackMe — SOC L1 Alert Reporting | Learning Guide

🛡️ TryHackMe — SOC L1 Alert Triage | Learning Guide

Detection and Analysis (TryHackMe)

Preparation (TryHackMe)

The Blue Team Perspective (TryHackMe)

TryHackMe Blaster Beginner-Friendly Learning Guide

TryHackMe Network Security Essentials Beginner-Friendly Learning Guide

Threat Hunting & Splunk Analysis: Investigating a data leak

Windows Registry: The Other Half of the Process Story

Why 'Close Enough' Fails in Cyber Threat Intelligence — Lessons from MITRE ATT&CK, MISP, and YARA