Pro-tip: Master "normal." You can't spot a threat if you don't know what standard RPC or Kerberos traffic looks like. Build a home lab, analyze the PCAPs, and document the "why." That’s how you actually get hired. 🛡️
@cybercod.bsky.social
@cybercod.bsky.socialPro-tip: Master "normal." You can't spot a threat if you don't know what standard RPC or Kerberos traffic looks like. Build a home lab, analyze the PCAPs, and document the "why." That’s how you actually get hired. 🛡️
@citadelcysec.bsky.social👨💻New milestone in my SOC L2 journey.
Completed TryHackMe's Active Directory for SOC module.
And for those leveling up in SOC L2+ territory: a new Windows Incident Response & Forensics path is coming in November.
Looking forward to diving in.
@hackfest.bsky.social🔐 Formation Hackfest 2026 : Sécurité Physique 101-201-202
🔵 26 oct : 101 - #blueTeam
🔴 27-28 oct : 201 - #redTeam
🛠️ 29 oct : 202 - rétro-ingénierie systèmes électroniques
Info & Inscription: bit.ly/3UMsRx1
@cybercod.bsky.socialPro-tip: Master the "why" behind the alert. Don't just close tickets; learn to read Sysmon logs and PCAPs manually. If you can explain a suspicious process tree, you’re already ahead of the pack. 🛡️
@mowjee.bsky.social
@ustech.bsky.socialBreak into cybersecurity as a SOC analyst: SIEM fundamentals, alert triage, ticket discipline, and interview prep on a simulated ops floor. https://cyberthreatschool.com/courses #SOC #cybersecurity #blueteam
@cybercod.bsky.socialPro-tip: Hunting for shells? Use `tcp contains "id;whoami"` in Wireshark to spot raw RCE attempts. Don't scroll—filter your way to the truth. Triage faster, defend better. 🦈💻
@dafu09.bsky.social给防御方三条立即可做的事： ① 盯跨工具行为——API 调用序列、文件访问模式、自主重试频率 ② 默认假设：攻击者一天内能跑完一整条 agentic 攻击链 ③ 把"agentic 工作流"当独立威胁向量做桌面推演 攻击者已经 Agent 化。 你的检测还停在"单次 prompt"吗？ #AgentSecurity #BlueTeam #BuildInPublic
@ustech.bsky.socialThe real day-to-day of a SOC analyst: triage alerts, cut the noise, catch the one that's real. #SOC #cybersecuritycareers #blueteam
@cybercod.bsky.socialPro-tip: Stop scrolling! Use `tcp.flags.syn == 1 && tcp.flags.ack == 0` to isolate initial connection attempts. It’s the fastest way to spot scans or lateral movement in a messy pcap. Let the filters do the heavy lifting. 🔍
@manishrawat21.bsky.socialFeatured in tl;dr sec #339
My CISA KEV-to-Sigma detection pipeline was covered by Clint Gibler in the Blue Team section, alongside Rapid7 Labs and Tracebit research.
tldrsec.com/p/tldr-sec-339 via @clintgibler
@dailydebian.bsky.social@cybercod.bsky.socialPython is your security superpower! Automate scans, parse logs, or build custom IR tools.
Pro-tip: Master `requests` & `subprocess` for seamless external tool interaction. Cut repetitive tasks, amplify your defense.
@dailydebian.bsky.social
@pedri77.bsky.socialTop 20 malware families on one page: TTPs, IOCs, detection tools.
Free download:
https://malwareintel.es/free/malware-cards/?utm_source=bluesky&utm_medium=social&utm_campaign=mwi-rrss-sept
@timb.me.ukLess noise, more signal version of https://twitter.com/timb_machine. #socialist & #antifascist.
#ATT&CK, #purpleteam, #blueteam, #threatmodelling, #Cisco, #redteam, #EMFCamp, #uncon, #kde, #OpenVAS, #Portcullis, #Perl, #Debian, #Indymedia, #AS28792, #Solaris, #RISCOS adjacent security […]