Device Code Phishing from a SOC Perspective: Detect and Prevent
Device code phishing bypasses MFA without a fake login page or a stolen password. What we're seeing in the SOC, how the attack works, and what actually stops it.…
$ cat full-post>Category: Defence
6 post(s)
>Sudo Trace
>SudoTrace is a free, self-hosted, AI-assisted analyst workbench that shows you what really happened on a compromised endpoint — faster than MDE alone. Update 25/06/2026 — >SudoTrace now includes a Business Email Compromise Checker. Details at the bottom. If you work in a SOC and use Microsoft Defender for Endpoint, you already know the problem.…
$ cat full-postPassing the Microsoft Security Operations Analyst Exam (SC-200)
I recently passed my SC-200 exam and I wanted to share the resources I used to pass this exam. To keep it tl;dr, I recommend these three essential resources that are (in my opinion) key to passing the SC-200 exam: Udemy “SC-200 Microsoft Security Operations Analyst Course & SIMs” by John Christopher Microsoft Learn SC-200…
$ cat full-postServer Hardening with Wazuh: An Open-Source XDR Solution
My cloud-hosted VPS serves as a personal VPN server that also routes traffic through a Pi-hole to block ads and trackers—because, honestly, that’s the only way the internet is useable these days. It’s been running for a couple of years with little to no maintenance, and recently, I decided it was time to put my…
$ cat full-postMalware Analysis – A “totally legit” trading bot
I was recently sent this video by a friend who wanted to know if this was “legit”: The video advertises a trading bot that automates trades between crypto USDT and USDC, taking advantage of small price differences to generate guaranteed profit. Sounds too good to be true right? Let’s examine this so-called trading bot using…
$ cat full-postLeveling Up with HackTheBox Academy (CPTS & CDSA)
I have been working as SOC Analyst for several years, primarily working in banking Cyber Security Operation Centers. However after taking a career break, I wanted to refresh and upgrade my skills before re-entering the job market. Given the high costs of traditional cybersecurity certifications (I’m looking at you OffSec and SANS!!), I sought a…
$ cat full-post