Skip to main content

#soc-analyst

Every article tagged “soc-analyst”, newest first.

Articles tagged soc-analyst

Three nested translucent glass frames with thin amber edges, each wider than the last, on a dark background

Best Practices

EDR vs Antivirus vs XDR: Key Differences for SOC Analysts

EDR vs antivirus vs XDR: compare prevention, endpoint investigation and cross-domain data. See how SOC analysts read alerts and practice in simulations.

Nicole Dobrovolskyy7 min read
Abstract dark illustration of a shattered screen with glowing amber binary code bursting through it

Tutorials

Redline Stealer Detection: SOC Analyst Checklist

Detect Redline Stealer by its traces: non-browser reads of Login Data, reflective .NET loads, screen capture calls, SOAP C2 traffic, then a 6-step triage.

Astrid Lindqvist14 min read
Abstract dark grid of glass panels receding into shadow, lit by a warm orange glow, evoking the MITRE ATT&CK matrix

Tutorials

MITRE ATT&CK for SOC Analysts: Tactics, IDs, Examples

All 15 Enterprise tactic IDs (Lateral Movement is TA0008), how techniques nest under them, and a worked alert chain mapped to ATT&CK step by step.

Astrid Lindqvist24 min read