WiLLson โžŸ ๐Ÿ‘จโ€๐Ÿ’ป ๐Ÿ

WiLLson โžŸ ๐Ÿ‘จโ€๐Ÿ’ป ๐Ÿ

@themeek766.bsky.social

๐Ÿ‘จ๐Ÿฝโ€๐Ÿ’ป| I write about Tech, SOC workflows, SIEM alerts, threat analysis, and incident response so you can think like a blue-team analyst.

241 followers224 following3.3K posts

Pinned

๐——๐—ฎ๐˜† 13 | ๐—ช๐—ถ๐—ฟ๐—ฒ๐—น๐—ฒ๐˜€๐˜€ ๐—ก๐—ฒ๐˜๐˜„๐—ผ๐—ฟ๐—ธ๐—ถ๐—ป๐—ด ๐— ๐—ถ๐—ป๐—ฑ๐˜€๐—ฒ๐˜ (๐—ฆ๐—ข๐—– | ๐—Ÿ๐—ฒ๐—ฎ๐—ฟ๐—ป๐—ถ๐—ป๐—ด) Wireless doesnโ€™t just carry signals. It introduces new attack surfaces. โ€ข Learn 802.11 standards โ€ข Compare 2.4GHz vs 5GHz frequencies โ€ข Understand channels & interference โ€ข Map wireless security risks

WiLLson โžŸ ๐Ÿ‘จโ€๐Ÿ’ป ๐Ÿ reposted

I put together a complete CCNA in 8 Weeks roadmap and decided to make it free for everyone. If you're preparing for the CCNA or want to become a Junior Network Engineer, this guide gives you a structured path instead of guessing what to study next. ๐Ÿงต

WiLLson โžŸ ๐Ÿ‘จโ€๐Ÿ’ป ๐Ÿ reposted

๐Ÿ›ก๏ธ 28-day SOC build. In public. No filler. Every project here is a detection I wrote or an incident I walked end-to-end not a tutorial replay. ๐Ÿ” Splunk ยท SIEM ยท Log Analysis ๐Ÿง  MITRE ATT&CK ยท Threat Detection ๐Ÿ’ป Kali ยท Ubuntu ยท Windows home lab ๐Ÿ“œ ISC2 CC This is what hire-ready looks like ๐Ÿ‘‡

30-Day Cybersecurity Learning Journey OverTheWire Bandit CTF Documentation (Day 1โ€“10) ๐—ง๐—ต๐—ฟ๐—ฒ๐—ฎ๐—ฑ ๐Ÿงต 1/ ๐—ข๐˜ƒ๐—ฒ๐—ฟ๐—ง๐—ต๐—ฒ๐—ช๐—ถ๐—ฟ๐—ฒ ๐—•๐—ฎ๐—ป๐—ฑ๐—ถ๐˜ โ€“ ๐—Ÿ๐—ฒ๐˜ƒ๐—ฒ๐—น 0 โ†’ 1 (๐——๐—ฎ๐˜† 1) I started my cybersecurity learning journey by exploring the Bandit wargame.

View full thread

30-Day Cybersecurity Learning Journey OverTheWire Bandit CTF Documentation (Day 1โ€“10) ๐—ง๐—ต๐—ฟ๐—ฒ๐—ฎ๐—ฑ ๐Ÿงต 1/ ๐—ข๐˜ƒ๐—ฒ๐—ฟ๐—ง๐—ต๐—ฒ๐—ช๐—ถ๐—ฟ๐—ฒ ๐—•๐—ฎ๐—ป๐—ฑ๐—ถ๐˜ โ€“ ๐—Ÿ๐—ฒ๐˜ƒ๐—ฒ๐—น 0 โ†’ 1 (๐——๐—ฎ๐˜† 1) I started my cybersecurity learning journey by exploring the Bandit wargame.

๐——๐—ฎ๐—ถ๐—น๐˜† ๐—–๐—ง๐—™ ๐——๐—ถ๐˜€๐—ฐ๐—ถ๐—ฝ๐—น๐—ถ๐—ป๐—ฒ ~ ๐—ข๐˜ƒ๐—ฒ๐—ฟ๐—ง๐—ต๐—ฒ๐—ช๐—ถ๐—ฟ๐—ฒ ๐—๐—ผ๐˜‚๐—ฟ๐—ป๐—ฒ๐˜† Real technical skill isnโ€™t built in bursts. Itโ€™s built through consistency. Iโ€™ve committed to 30 minutes every day to complete one OverTheWire level until I finish the entire series. The goal isnโ€™t just solving challenges.

Itโ€™s becoming fully comfortable in the Linux terminal while strengthening core fundamentals like: โ€ข File systems โ€ข Permissions โ€ข Networking โ€ข Command-line efficiency Iโ€™ll also document lessons learned and progress along the way. Small daily progress compounds fast. Consistency builds mastery.

๐—ง๐—ต๐—ฒ ๐—ฆ๐—จ๐—ฆ๐—ฃ๐—œ๐—–๐—œ๐—ข๐—จ๐—ฆ ๐—ก๐—ฒ๐˜๐˜„๐—ผ๐—ฟ๐—ธ ๐—™๐—น๐—ผ๐˜„ โ€“ ๐——๐—ฒ๐—ฐ๐—ฒ๐—บ๐—ฏ๐—ฒ๐—ฟ ๐Ÿต, ๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฑ SOC network logs showed one device sending unusual traffic to a rarely used external IP. Investigation revealed malware beaconing for C2 communication. Immediate containment stopped lateral movement and prevented data theft.

๐Ÿšจ๐—ฅ๐—ฎ๐—ป๐˜€๐—ผ๐—บ๐˜„๐—ฎ๐—ฟ๐—ฒ ๐—•๐—ฒ๐—ต๐—ฎ๐˜ƒ๐—ถ๐—ผ๐—ฟ ๐—Ÿ๐—ฎ๐—ฏ (๐—•๐—ฒ๐—ด๐—ถ๐—ป๐—ป๐—ฒ๐—ฟ ๐—ฆ๐—ข๐—–) Ransomware isnโ€™t just malware. Itโ€™s patterns. In a controlled lab I simulated: โ€ข Mass file changes โ€ข AES encryption โ€ข Files renamed to .locked โ€ข A ransom note dropped

๐Ÿšจ Beginner SOC Lab: Catching Sneaky Access I built a small home lab to practice as a SOC analyst. Setup: โ€ข Windows 11 VM (victim) โ€ข Kali Linux VM (attacker) โ€ข Shared โ€œHRโ€ folder with a Canarytoken inside Simulated an attack: โ€ข Found the SMB share โ€ข Opened files โ€ข Triggered the Canarytoken๏ฟผ

๐Ÿ’ก Instant alert showed IP + time of access Checked Windows logs: โ€ข 4624 โ†’ login โ€ข 5140 โ†’ network share access โ€ข 5145 โ†’ file access Attack โ†’ Alert โ†’ Timeline Lesson: Even a simple decoy can teach you how SOC detection works. Next: connect logs to a SIEM and see alerts in one place.๏ฟผ

๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง๐Ÿง๐Ÿง๐Ÿง ๐Ÿง๐Ÿง๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง๐Ÿง๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง ๐Ÿง

๐—Ÿ๐—ฎ๐˜๐—ฒ๐—ฟ๐—ฎ๐—น ๐— ๐—ผ๐˜ƒ๐—ฒ๐—บ๐—ฒ๐—ป๐˜ & ๐—ฃ๐—ฒ๐—ฟ๐˜€๐—ถ๐˜€๐˜๐—ฒ๐—ป๐—ฐ๐—ฒ Lateral movement = breaking into one system, then sneaking into others using stolen creds or tools. Persistence = staying hidden with auto-start programs or fake accounts. SOC teams hunt this using logs + smart detection rules ๐Ÿ›ก๏ธ

Package cleanup 1๏ธโƒฃ apt autoremove โ€“ remove unused 2๏ธโƒฃ apt clean โ€“ clear cache 3๏ธโƒฃ dpkg -l โ€“ list packages 4๏ธโƒฃ dpkg -r โ€“ remove package 5๏ธโƒฃ apt purge โ€“ remove configs too Keep your system clean & fast. Which one would you run today?

๐Ÿ›ก๏ธ๐—•๐—ฒ๐—ด๐—ถ๐—ป๐—ป๐—ฒ๐—ฟ ๐—ฆ๐—ข๐—– ๐—Ÿ๐—ฎ๐—ฏ: ๐—”๐—ฝ๐—ฎ๐—ฐ๐—ต๐—ฒ๐Ÿฎ ๐— ๐—ผ๐—ป๐—ถ๐˜๐—ผ๐—ฟ๐—ถ๐—ป๐—ด Installed Apache on Kali. But this wasnโ€™t about hosting a page. It was about logs. Watched access.log in real time. Simulated 404 probing. Asked: normalโ€ฆ or recon? Learning to spot patterns early. SOC starts with visibility. Visibility starts with logs.

๐Ÿ“‹๐—ช๐—ถ๐—ป๐—ฑ๐—ผ๐˜„๐˜€ ๐—–๐—น๐—ถ๐—ฝ๐—ฏ๐—ผ๐—ฎ๐—ฟ๐—ฑ = ๐—™๐—ผ๐—ฟ๐—ฒ๐—ป๐˜€๐—ถ๐—ฐ ๐—˜๐˜ƒ๐—ถ๐—ฑ๐—ฒ๐—ป๐—ฐ๐—ฒ Copy. Paste. Forget? Not on Windows. With clipboard history enabled, copied data is stored in a user-linked database. Passwords. API keys. SSH commands. Apps close. Screens clear. Artifacts remain. In DFIR, even Ctrl+C can anchor a timeline.

๐——๐—ฎ๐˜† 13 | ๐—ช๐—ถ๐—ฟ๐—ฒ๐—น๐—ฒ๐˜€๐˜€ ๐—ก๐—ฒ๐˜๐˜„๐—ผ๐—ฟ๐—ธ๐—ถ๐—ป๐—ด ๐— ๐—ถ๐—ป๐—ฑ๐˜€๐—ฒ๐˜ (๐—ฆ๐—ข๐—– | ๐—Ÿ๐—ฒ๐—ฎ๐—ฟ๐—ป๐—ถ๐—ป๐—ด) Wireless doesnโ€™t just carry signals. It introduces new attack surfaces. โ€ข Learn 802.11 standards โ€ข Compare 2.4GHz vs 5GHz frequencies โ€ข Understand channels & interference โ€ข Map wireless security risks

๐—•๐—ฒ๐—ด๐—ถ๐—ป๐—ป๐—ฒ๐—ฟ ๐—Ÿ๐—ถ๐—ป๐˜‚๐˜… ๐—ฆ๐˜†๐˜€๐—ฎ๐—ฑ๐—บ๐—ถ๐—ป ๐—Ÿ๐—ฎ๐—ฏ Built a sandbox inside my VM. Simulated users, groups, permissions with Bash. No production risk. Just controlled practice. Automated tasks. Logged activity. Versioned with Git. You donโ€™t need real servers to build real skills. VM + structure = safe growth.