What EDR Reveals After a Suspicious Document Opens
Follow the evidence from the first alert to the downloaded file, and learn how EDR helps determine what ran, what stopped, and what remains uncertain.
Sep 28, 20266 min read6
Command Palette
Search for a command to run...
Latest articles
Climbing the Pyramid of Pain: From Hashes to TTP-Based Detection
What TryHackMe Summit teaches beginner SOC analysts about building detections attackers cannot easily evade
Sep 11, 202622 min read73
SOC Team Internals: How an L1 Analyst Thinks, Triages and Reports
I spent the last few weeks going through the TryHackMe SOC Team Internals module. Four rooms. Around four hours of actual learning. And a lot of things clicked that I had been reading about in theory
May 31, 202612 min read68
Why the OSI Model Diagram in Your Textbook Is Incomplete
I spent weeks staring at the OSI model and the Ethernet frame diagram in my notebook. I could label every field. I could recite all seven layers. But I genuinely had no idea what was actually happenin
May 25, 20269 min read100
TryHackMe SEC1 Certification: A Honest, Detailed Review
SEC1 is one of the few beginner certifications that actually puts you inside a real environment and asks you to work. This is a first-hand account of what the exam looks like, where it tests you hard,
May 7, 202611 min read130
CSEDP Exam by SecOps Group: Everything I Wish Someone Had Written Before I Sat for the Exam
Author: Tirthak Likhar | Score: 87% | Grade: Merit | Exam: CSEDP (Certified Social Engineering Defence Practitioner) | Provider: The SecOps Group | Attempt: First Let me be upfront about something be
May 4, 202616 min read58
I Cleared the TryHackMe SEC0 Certification in a Single Day Here's Everything You Need to Know
Author: Tirthak Likhar | Score: 560 / 600 | Pass Threshold: 390 | Date: April 24, 2026 | Attempt: First Today wasn't planned. I woke up, sat down, and thought I'd just start going through TryHackMe's
Apr 25, 20269 min read317
I Ran 9 MITRE ATT&CK Simulations Against My Own SIEM. Here Is What Actually Happened.
A ground-up walkthrough of building a Wazuh SOC lab, running real attack simulations, and learning why things break before they work.
Apr 22, 202618 min read65