TryHackMe Conti: ProxyShell to Ransomware in Splunk
SOC Level 2

Conti: ProxyShell to Ransomware in Splunk

August 30, 2026 · 7 min
TryHackMe Traffic Analysis Pitfalls: When the Wire Stops Talking
SOC Level 2

Traffic Analysis Pitfalls: When the Wire Stops Talking

August 24, 2026 · 12 min
TryHackMe Response and Recovery: Containing an M365 Compromise From the Audit Log
SOC Level 2

Response and Recovery: Containing an M365 Compromise From the Audit Log

August 22, 2026 · 8 min
TryHackMe Volt Typhoon: Retracing an APT Through Three Log Sources
SOC Level 2

Volt Typhoon: Retracing an APT Through Three Log Sources

August 22, 2026 · 14 min
TryHackMe Post-Incident Activity: Turning an Incident Into Detection Rules
SOC Level 2

Post-Incident Activity: Turning an Incident Into Detection Rules

August 21, 2026 · 10 min
TryHackMe Detection and Analysis: Scoping a Nexus Financial Account Compromise
SOC Level 2

Detection and Analysis: Scoping a Nexus Financial Account Compromise

August 21, 2026 · 10 min
TryHackMe DetectMare: Five Broken Detections and a Red Team That Attacks Your Filters
SOC Level 2

DetectMare: Five Broken Detections and a Red Team That Attacks Your Filters

August 21, 2026 · 8 min
TryHackMe Monitoring AWS Workloads Walkthrough
SOC Level 2

Monitoring AWS Workloads Walkthrough

August 18, 2026 · 8 min
TryHackMe Monitoring AWS Services Walkthrough
SOC Level 2

Monitoring AWS Services Walkthrough

August 18, 2026 · 8 min
TryHackMe Monitoring AWS Logins Walkthrough
SOC Level 2

Monitoring AWS Logins Walkthrough

August 18, 2026 · 7 min