TryHackMe Conti: ProxyShell to Ransomware in Splunk
SOC Level 2

Conti: ProxyShell to Ransomware in Splunk

August 30, 2026 · 7 min
TryHackMe Monday Monitor: Reading Sysmon in Wazuh
SOC Level 2

Monday Monitor: Reading Sysmon in Wazuh

August 30, 2026 · 7 min
TryHackMe Building Wazuh Rules: Decoders and CDB Alerts
SOC Level 2

Building Wazuh Rules: Decoders and CDB Alerts

August 30, 2026 · 10 min
TryHackMe Servidae: Tracing a Compromised Workstation in ELK
SOC Level 2

Servidae: Tracing a Compromised Workstation in ELK

August 29, 2026 · 7 min
TryHackMe MalBuster: Four Binaries, No Hand-Holding
SOC Level 2

MalBuster: Four Binaries, No Hand-Holding

August 29, 2026 · 7 min
TryHackMe MalDoc Static Analysis: PDF, Office and OneNote
SOC Level 2

MalDoc Static Analysis: PDF, Office and OneNote

August 29, 2026 · 7 min
TryHackMe Script Static Analysis: Four Scripts, One PowerShell Prompt
SOC Level 2

Script Static Analysis: Four Scripts, One PowerShell Prompt

August 29, 2026 · 9 min
TryHackMe Threat Hunting With YARA: Four Modifiers and a Self-Match
SOC Level 2

Threat Hunting With YARA: Four Modifiers and a Self-Match

August 29, 2026 · 10 min
TryHackMe Basic Static Analysis: Six Samples, No Execution
SOC Level 2

Basic Static Analysis: Six Samples, No Execution

August 28, 2026 · 11 min
TryHackMe Traffic Analysis Pitfalls: When the Wire Stops Talking
SOC Level 2

Traffic Analysis Pitfalls: When the Wire Stops Talking

August 24, 2026 · 12 min