Skip to main content
Back to all posts
Tag

#soc

Person at a MacBook Pro with a messaging app open in a cafe, simultaneously scrolling on a smartphone, iced drink on the table
Tutorials

Phishing Email Examples: 15 Analyzed by a SOC Analyst

Phishing email examples analyzed with real analyst eyes: red flags, header tells, and the patterns every security-aware person should recognize.

Astrid LindqvistJun 10, 202622 min read

Dual-monitor workstation in a dark room showing code on an iMac and a landscape wallpaper on a second display, lit by a desk lamp
Best Practices

Best EDR Tools in 2026: What Tier 1 Analysts Learn First

Best EDR tools for SOC analysts: CrowdStrike, Defender, SentinelOne, Cortex XDR and more, ranked by console learnability and job-market frequency.

Astrid LindqvistJun 6, 202617 min read

Green Matrix-style falling code characters cascading down a pure black background, representing data stream analysis and threat hunting
Best Practices

Cyber Threat Hunting Tools: 13 SOC Analysts Use (2026)

Cyber threat hunting tools every SOC analyst needs: Sigma, YARA, KQL, Velociraptor, Wireshark, Zeek, MISP and more, grouped by layer with code examples.

Astrid LindqvistJun 3, 202618 min read

Dark analytics dashboard on a tablet screen displaying colorful performance charts and session metrics against a black background
Best Practices

Best SIEM Tools in 2026: 12 Platforms Ranked

12 best SIEM tools for 2026, re-checked in September: Splunk under Cisco, QRadar SaaS moved to Cortex XSIAM, pricing models, and who each one fits.

Astrid LindqvistMay 28, 202626 min read

Hand holding a blue pen writing notes on paper at a wooden desk with a coffee mug and notebook beside it
Best Practices

Best Cybersecurity Certifications for Beginners: 2026 Costs

8 beginner certs ranked for SOC analyst jobs, with prices checked on each issuer's site in Sept 2026: Security+ $439, BTL1 £399, ISC2 CC no longer free.

Astrid LindqvistMay 21, 202618 min read

Network traffic analysis dashboard showing TCP and UDP port connections, firewall logs, and protocol distribution for SOC triage
Tutorials

Common Port Numbers Cheat Sheet: 42 Ports for SOC Triage

The 42 TCP/UDP port numbers SOC analysts read in firewall logs and SIEM alerts, what each one means in triage, and a printable cheat sheet image to save.

Astrid LindqvistMay 11, 202621 min read

Wax-sealed envelope beside a magnifying glass on a dark surface with a glowing phishing hook and orange code overlay in the background
Tutorials

How to Analyze a Phishing Email: SOC Walkthrough

A step-by-step SOC workflow to analyze a phishing email: safe handling, header forensics, URL and attachment triage, and a documented verdict.

Astrid LindqvistMay 5, 202617 min read

Close-up of a dark SIEM dashboard on a widescreen monitor, rows of alerts highlighted in orange, gloved hands at the keyboard
Tutorials

Alert Triage: Real Threats vs False Positives

Alert triage is the core SOC skill. Learn the framework analysts use to assess severity, confirm IOCs, and separate real threats from false positives.

Astrid LindqvistApr 29, 202613 min read

Two silhouettes facing each other across a table with a large curved orange-lit world map and data dashboard screen behind them
Best Practices

SOC Analyst Interview Questions: 30 With Answers

SOC analyst interview questions decoded: what interviewers test, sample answers, and log examples to study before your first security ops interview.

Astrid LindqvistApr 23, 202619 min read