Real Time SOC Analysis & Training | TryHackMe SOC Simulator Introduction to Phishing

📄 Cyber Security Certification Notes & Cheat Sheets https://buymeacoffee.com/notescatalog... 🚀(2nd link) Cyber Security Certification Notes & Cheat Sheets https://shop.motasem-notes.net/collec... 💡Cyber Security Notes | Membership Access https://buymeacoffee.com/notescatalog... 🧩Cybersecurity Direct Coaching & Mentoring https://shop.motasem-notes.net/collec... 🔥Download FREE Cyber Security 101 Study Notes https://buymeacoffee.com/notescatalog... 🧠 Get Strategic cyber security and tech insights weekly to your email by joining my newsletter below https://buymeacoffee.com/notescatalog... 📊Blog Writeups https://www.motasem-notes.net *** The video covers real-time SOC (Security Operations Center) analysis with a focus on phishing detection and response using TryHackMe’s SOC simulator. The session walks through phishing alerts, their investigation, and the importance of distinguishing between false positives and true positives to improve SOC efficiency. **** Writeup https://motasem-notes.net/real-time-s... ****** Store https://buymeacoffee.com/notescatalog... Patreon   / motasemhamdan   Instagram   / motasem.hamdan.tech   Google Profile https://maps.app.goo.gl/eLotQQb7Dm6ai... LinkedIn [1]:   / motasem-hamdan-7673289b   [2]:   / motasem-eldad-ha-bb42481b2   Instagram   / mastermindstudynotes   Twitter   / manmotasem   Facebook   / motasemhamdantty   ** 00:00 - Introduction 00:05 - Overview of SOC Simulator 00:18 - Logging into the Dashboard 00:23 - Reviewing Alerts in the Queue 00:42 - Investigating a Suspicious Email Alert 01:28 - Understanding Email Direction (Inbound) 01:48 - Taking Ownership of Alerts 02:21 - Analyzing Suspicious Domains 03:12 - Searching Events in Splunk 04:20 - Using Online Sandboxes for Threat Intelligence 05:06 - Closing False Positive Alerts 06:04 - Investigating Another Suspicious Email 07:00 - Parent-Child Process Relationships in Security 07:47 - Using Splunk for Process Investigation 09:41 - Determining Normal vs. Suspicious Processes 10:55 - Replying to Suspicious Emails 12:01 - Investigating Suspicious Email Attachments 13:09 - Analyzing Scripted Attachments for Threats 14:45 - Another Suspicious Email Review 15:26 - Closing Investigation