MediumThe most insightful stories about Soc Analyst - Medium

Incident Response

Information Security

Tryhackme Walkthrough

Soc Analyst

Explore recommended reads, summarized by AI

SOC Analyst Training and Skills

Guides and resources for building technical skills and practical experience in security operations.

Home Lab Setup and Learning

Popular this week

Ilyas Rafiq

SOC Analyst Study Notes (Classes 23–28): Linux, EDR, SIEM & Splunk

Saif Khan

Building a Password Spraying Detection Rule in Microsoft Sentinel

Saif Khan

15 Essential KQL Queries Every Microsoft Sentinel SOC Analyst Should Know

Sadashiv_Pole

Top 20 SOC Interview Questions (With Real Answers From My Own Interviews)

Skill IT

SOC Analyst Roadmap 2026: From IT Basics to Threat Hunting in 5 Months

Selected by Medium

In

System Weakness

by

駱冠宇 / Bill Lo

Building a SIEM-Based Incident Response Lab with Splunk, Snort, Kali Linux, and Windows Server

Latest stories

Oktay Acar

LetsDefend Challenge: Excel 4.0 Macros

Qusayfarid

RetailBreach Lab: Investigating a Web Application Attack with Wireshark

Chiemerie

How I Built My First Cybersecurity Project: Detecting Brute-Force Attacks in Server Logs

TanmayDhanula

SOC168 — Whoami Command Detected in Request Body — LetsDefend

Saif Khan

The Admin Role Was Activated. Was It an Attack — or PIM Doing Its Job?

See more stories

Who to follow

Popular this week

Ilyas Rafiq

SOC Analyst Study Notes (Classes 23–28): Linux, EDR, SIEM & Splunk

Saif Khan

Building a Password Spraying Detection Rule in Microsoft Sentinel

Saif Khan

15 Essential KQL Queries Every Microsoft Sentinel SOC Analyst Should Know

Sadashiv_Pole

Top 20 SOC Interview Questions (With Real Answers From My Own Interviews)

Skill IT

SOC Analyst Roadmap 2026: From IT Basics to Threat Hunting in 5 Months

Selected by Medium

In

System Weakness

by

駱冠宇 / Bill Lo

Building a SIEM-Based Incident Response Lab with Splunk, Snort, Kali Linux, and Windows Server

Latest stories

Oktay Acar

LetsDefend Challenge: Excel 4.0 Macros

Qusayfarid

RetailBreach Lab: Investigating a Web Application Attack with Wireshark

Chiemerie

How I Built My First Cybersecurity Project: Detecting Brute-Force Attacks in Server Logs

TanmayDhanula

SOC168 — Whoami Command Detected in Request Body — LetsDefend

Saif Khan

The Admin Role Was Activated. Was It an Attack — or PIM Doing Its Job?

See more stories

Who to follow