Introduction to SOC

Elastic SIEM Search Overview

Login Attempts INV - 1

Login Attempts INV - 2

Threat Intel IP Indicator Detection INV

CrowdStrike New Detection Overview

SOC & Incident Response Case Management - TheHive Overview

Suspicious Executable via Schedule Task

Falcon CrowdStrike Activities Dashboard

Suspicious Execution via Scheduled Task - Full Investigation

Bookmarked Tools and Dashboard

CrowdStrike - Custom Intelligence via Indicator of Comprised(IOC) Investigation

CrowdStrike Process Event Analysis

CrowdStrike Real Time Response(RTR) - Full Investigation Report

Splunk Account Set up I

Splunk Account Set up II

Threat Hunting with Splunk I - Possible Reconnaissance

Threat Hunting with Splunk I - Possible Infection

Threat Hunting with Splunk III - IDS/IPS Logs

Resume Building

Azure Security for Beginners

Azure Identity Protection - Risky Users

Phishing Email Anaylysis with M365 Defender

Phishing Email Header Analysis Using Open-Source Tools