About
Hi, I’m Umamaheswari, a SOC-focused Cybersecurity Analyst dedicated to threat detection, incident triage, and defensive security.
I enjoy understanding how attackers operate, analyzing their techniques, and improving defenses to detect and prevent real-world attacks.
Key Topics Covered:
- Advanced Alert Triage: Correlation techniques using Splunk and ELK
- Network Forensics: Deep-dives into PCAP using Wireshark, Zeek, and Brim investigations
- Endpoint Analysis: Tracing threats through Sysmon and Windows Event Logs
- Phishing Email Investigations: Analyzing Email Headers, Authentication Checks, URLs, Attachments
- Digital Forensics: Disk and Memory analysis using FTK Imager, Autopsy, EricZimmermantools, Volatility and more
- Lab Walkthroughs: Step-by-step guides for TryHackMe, HTB, and CyberDefenders
This blog is a technical notebook of my journey through the blue team landscape. My goal is to simplify complex security concepts through practical, visual documentation.