ls ~/research
Research and write-ups
Investigations, lab notes and detection logic. Simulated write-ups use the synthetic data from the SOC lab; planned ones are placeholders until the work behind them is done.
3 write-ups
-
Walking through alert QS-1004 from the SOC lab demo, from the failed logons to the account that got in and what to do next.
-
SOC automation lab build notes
PlannedSetup notes, problems hit and fixes for the Wazuh, Shuffle and TheHive lab, with redacted screenshots.
-
TryHackMe learning log
PlannedShort notes on completed rooms, focused on the detection and response lessons rather than the flags.
Nothing matches those filters. Clear the search or set Status and Topic back to All.