SOC Tier 1 Lab: Investigating Suspicious Login Activity
A hands-on SOC Tier 1 case study correlating failed logons, a successful RDP logon, and privileged session activity.
Blogs
3 Quick Linux and Docker Checks Before Starting Work
Before troubleshooting permissions or working with containers, a few read-only checks can reveal useful context. These three commands take little time and help you avoid assumptions. This post uses real command results from a personal Fedora Linux 44 environment. It is a personal practice note, not a production SOC incident or professional work experience. 1. Identify your user and groups with id id In my Fedora environment, the command showed: ...
Safe Folder Move Bash Script
This post shows a safe Bash workflow for moving a folder into another folder completely and in a controlled way: demo first, then dry-run, and finally a confirmed apply.
Tier-1 SOC Analyst Cheat Sheet: What to Check in the First 15 Minutes
A practical Tier-1 SOC cheat sheet for the first 15 minutes of triage, with the exact checks, event IDs, ports, and escalation cues that matter most.
SOC Structure and Tier-1 Role: Your 15-Minute Overview
Quick guide to SOC hierarchy, Tier-1 duties, responsibilities, and tools every analyst needs to know on day one.
How to Become a SOC Tier 1 Analyst: Series Kickoff and Roadmap
A practical SOC Tier 1 Analyst kickoff guide covering the exact skills, weekly workflow, and portfolio approach to become interview-ready faster.