The first step to becoming a great SOC analyst is understanding the alerts you’ll encounter every day.

Deliberately installing vulnerable software, scanning it with an enterprise-grade vulnerability management tool, remediating the findings…

Lab Scenario

Detection engineers often face a common challenge:

Hello! I am currently working toward my SAL1 certification and plan to write up the 12 CTFs featured in the course, as well as the two SOC…

Welcome! Here, I will be sharing interesting and useful information regarding cybersecurity topics that I have learned. This article will…

by Dan “Haircutfish” Rearden | haircutfish.com | Guest Author Working in the SOC can be a grind. Whether triaging alerts, escalating to clients, or just trying to understand why users […]

Introduction

Hello, Analysts and Attackers 👋

I built a Python tool that detects SSH brute-force attacks in real time and automatically blocks the attacker’s IP using iptables — running…

A practical reference for common SPL queries, commands, and operators.

Introduction

What Lahaina and the Palisades should teach anyone who tests systems for a living

Description : Design a safe AI agent by defining its scope, tools, oversight, stop conditions, and output.

When entering cybersecurity, the terms Offensive (Red team) and Defensive (Blue Team) get thrown around a lot. Today, I completed both the…

Description : Compare traditional workflows, AI workflows, assistants, and agents for a security-alert problem.