--- title: "#soc-analyst articles | Hashnode" description: "Explore 114 articles tagged #soc-analyst on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/soc-analyst" --- Tag # #soc-analyst 114 posts · 8 followers [Jebitok](https://hashnode.com/@w1t3r) · [22h ago](https://hashnode.com/posts/quiet-as-the-grave-a-threat-hunt-case-study-tryhackme-soc/6af4b70cfe42279bc52ba7a2) ### [Quiet as the Grave: A Threat Hunt Case Study (TryHackMe SOC)](https://www.sharonjebitok.com/quiet-as-the-grave-a-threat-hunt-case-study-tryhackme-soc?utm_source=hashnode&utm_medium=feed) What this is Quiet as the Grave is a TryHackMe threat-hunting scenario, again set at TryHatMe Studios. Unlike an alert-driven SOC queue, a hunt starts from a hypothesis, not an alert: threat intellige 6 min read · [sharonjebitok.com](https://www.sharonjebitok.com/quiet-as-the-grave-a-threat-hunt-case-study-tryhackme-soc?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [23h ago](https://hashnode.com/posts/repossessed-tryhackme-soc-simulator-case-report-record/6af4b095c7bf7fda367e18d5) ### [Repossessed (TryHackMe SOC Simulator): Case Report Record](https://www.sharonjebitok.com/repossessed-tryhackme-soc-simulator-case-report-record?utm_source=hashnode&utm_medium=feed) Link to the SOC Simulator on TryHackMe Scenario: TryHatMe Studios, launch of the NeuralNexus platformer. A Marketing workstation spawns a process it should not. 9 alerts, simulated environment. Clock 7 min read · [sharonjebitok.com](https://www.sharonjebitok.com/repossessed-tryhackme-soc-simulator-case-report-record?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Oct 26](https://hashnode.com/posts/the-o365-intrusion-splunk-tryhackme/6adf26a5a268e996cf68ac0d) ### [The O365 Intrusion - Splunk (TryHackMe)](https://www.sharonjebitok.com/the-o365-intrusion-splunk-tryhackme?utm_source=hashnode&utm_medium=feed) Link to the O365 Intrusion on TryHackMe Active investigation High Situation Report Vantage Dynamics' IT team escalated a report from their Accounts Payable department on 27 August. An employee, Marc 5 min read · [sharonjebitok.com](https://www.sharonjebitok.com/the-o365-intrusion-splunk-tryhackme?utm_source=hashnode&utm_medium=feed) [Tirthak Likhar](https://hashnode.com/@tirthak10) · [Sep 28](https://hashnode.com/posts/what-edr-reveals-after-a-suspicious-document-opens/6aba964e5f1a504879cedaf6) ### [What EDR Reveals After a Suspicious Document Opens](https://tirthaklikhar.hashnode.dev/what-edr-reveals-after-a-suspicious-document-opens?utm_source=hashnode&utm_medium=feed) Follow the evidence from the first alert to the downloaded file, and learn how EDR helps determine what ran, what stopped, and what remains uncertain. 6 min read · [tirthaklikhar.hashnode.dev](https://tirthaklikhar.hashnode.dev/what-edr-reveals-after-a-suspicious-document-opens?utm_source=hashnode&utm_medium=feed) [odufuwababajide77](https://hashnode.com/@mrkay) · [Sep 29](https://hashnode.com/posts/network-discovery-detection-visualizing-scans-in-elastic-siem/6abb1303c73be7e45022c992) ### [Network Discovery Detection: Visualizing Scans in Elastic SIEM](https://kay-security-labs.hashnode.dev/network-discovery-detection-visualizing-scans-in-elastic-siem?utm_source=hashnode&utm_medium=feed) Learn how to hunt for internal network discovery tactics and visualize ICMP ping sweeps using raw CLI logs and Elastic SIEM (Kibana) 4 min read · [kay-security-labs.hashnode.dev](https://kay-security-labs.hashnode.dev/network-discovery-detection-visualizing-scans-in-elastic-siem?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Sep 23](https://hashnode.com/posts/zero-tolerance-tryhackme/6ab3e1d4e4848307dc8dd5c6) ### [Zero Tolerance (TryHackMe)](https://www.sharonjebitok.com/zero-tolerance-tryhackme?utm_source=hashnode&utm_medium=feed) Link to the challenge on TryHackMe: Zero Tolerance It was supposed to be a regular morning at ProbablyFine Ltd. L2 had just returned from paternity leave. L3 was hosting a live webinar on "Proactive 7 min read · [sharonjebitok.com](https://www.sharonjebitok.com/zero-tolerance-tryhackme?utm_source=hashnode&utm_medium=feed) [3](https://hashnode.com/posts/zero-tolerance-tryhackme/6ab3e1d4e4848307dc8dd5c6) [Jebitok](https://hashnode.com/@w1t3r) · [Sep 22](https://hashnode.com/posts/challenge-snapped-phish-ing-line-tryhackme/6ab24bf2432a54209daeb82c) ### [Challenge: Snapped Phish-ing Line (TryHackMe)](https://www.sharonjebitok.com/challenge-snapped-phish-ing-line-tryhackme?utm_source=hashnode&utm_medium=feed) Link to challenge on TryHackMe: Snapped Phish-ing Line As a member of the IT department at SwiftSpend Financial, you are responsible for assisting employees with technical concerns. What initially app 3 min read · [sharonjebitok.com](https://www.sharonjebitok.com/challenge-snapped-phish-ing-line-tryhackme?utm_source=hashnode&utm_medium=feed) [samineni nikhil](https://hashnode.com/@nikhilsamineni) · [Sep 14](https://hashnode.com/posts/https-downgrade-attack-using-bettercap/6aa85f7e3d3fdd351882ee6c) ### [HTTPS Downgrade Attack Using Bettercap](https://nikhilsamineni.hashnode.dev/https-downgrade-attack-using-bettercap?utm_source=hashnode&utm_medium=feed) Introduction ARP Spoofing and Man-in-the-Middle Attack Using Bettercap I recently did a practical cybersecurity lab using Kali Linux, Windows 10, EVE-NG, and Bettercap. I had learned about ARP spoofin 5 min read · [nikhilsamineni.hashnode.dev](https://nikhilsamineni.hashnode.dev/https-downgrade-attack-using-bettercap?utm_source=hashnode&utm_medium=feed) [Sunny](https://hashnode.com/@sunny1103) · [Sep 14](https://hashnode.com/posts/tryhackme-introduction-to-edr-learning-guide/6aa7a2a59d56181213f7a891) ### [🛡️ TryHackMe — Introduction to EDR | Learning Guide](https://cybersecurity-learning.hashnode.dev/tryhackme-introduction-to-edr-learning-guide?utm_source=hashnode&utm_medium=feed) Platform: TryHackMe Room: Introduction to EDR Path: SOC Level 1 → Core SOC Solutions Estimated Time: 60 Minutes Status: Completed ✅ 20 min read · [cybersecurity-learning.hashnode.dev](https://cybersecurity-learning.hashnode.dev/tryhackme-introduction-to-edr-learning-guide?utm_source=hashnode&utm_medium=feed) [ridesh raju bijwe](https://hashnode.com/@rideshcyber) · [Sep 13](https://hashnode.com/posts/building-my-first-soc-home-lab-with-windows-kali-linux-using-oracle-virtualbox/6aa67b1f8fef56e08f12d0b8) ### [Building My First SOC Home Lab with Windows & Kali Linux Using Oracle VirtualBox](https://understanding-soc-as-a-learner.hashnode.dev/building-my-first-soc-home-lab-with-windows-kali-linux-using-oracle-virtualbox?utm_source=hashnode&utm_medium=feed) Learn how to build a SOC home lab with Windows and Kali Linux using Oracle VirtualBox. Configure virtual networking and create a foundation for SIEM. 8 min read · [understanding-soc-as-a-learner.hashnode.dev](https://understanding-soc-as-a-learner.hashnode.dev/building-my-first-soc-home-lab-with-windows-kali-linux-using-oracle-virtualbox?utm_source=hashnode&utm_medium=feed)