https://orioninsist.org/tags/soc-tier-1/Recent content in SOC Tier 1 on orioninsisthttps://orioninsist.org/orioninsist-logo.pnghttps://orioninsist.org/orioninsist-logo.pngHugo -- 0.167.0en-USThu, 15 Oct 2026 00:09:39 +0300https://orioninsist.org/blog/soc-tier-1-suspicious-login-investigation/Thu, 15 Oct 2026 00:00:00 +0300https://orioninsist.org/blog/soc-tier-1-suspicious-login-investigation/Investigate suspicious Windows logons using Event IDs 4625, 4624, and 4672 in a practical SOC Tier 1 simulation.