Mohd Kashif | SOC Analyst

Windows Architecture for SOC Analysts: A Complete Guide to Detection & Investigation - Part 11

Mon, 27 Jul 2026 10:00:10 +0530

Windows Architecture Overview Link to heading

Windows architecture defines the foundational structure of the operating system, encompassing how processes run, how memory is managed, how users authenticate, and how security is enforced. For SOC analysts, this architecture represents the primary battlefield where attacks occur and must be detected.

User Mode vs. Kernel Mode Link to heading

User Mode Link to heading

User mode runs applications such as Chrome, Microsoft Word, and other user processes, along with some system services. Processes operating in this mode face significant restrictions: they cannot directly access hardware and cannot modify the kernel. From a SOC perspective, user mode is where most malware initially executes—phishing emails lead to malicious Word documents, which then launch PowerShell, ultimately enabling malware execution.

About

Mon, 27 Jul 2026 00:00:00 +0000

Hi, I’m Mohd Kashif 👋 Link to heading

I’m an aspiring SOC Analyst (Level 1) based in Lucknow, Uttar Pradesh, currently building my path into cybersecurity through hands-on learning, certifications, and real internship experience.

I hold a Google Cybersecurity Professional Certificate and completed a 6-month internship at Codevirus Security Pvt. Ltd., where I worked on security monitoring, incident documentation, and network/software troubleshooting. I’m currently pursuing CompTIA Security+ and the TryHackMe SOC Level 1 practical certification to sharpen my skills in log analysis, SIEM investigation, and incident triage.

Contact

Mon, 27 Jul 2026 00:00:00 +0000

I’m always open to conversations about SOC roles, cybersecurity, or feedback on what I’m building here.

Email: work.kashif7@gmail.com
LinkedIn: linkedin.com/in/cyberkashif
Location: Lucknow, Uttar Pradesh, India

Feel free to drop a message — I usually respond within a day or two.

Hire Me

Mon, 27 Jul 2026 00:00:00 +0000

Looking for a Level 1 SOC Analyst Link to heading

I’m actively looking for opportunities as a Junior / L1 SOC Analyst, ideally in threat monitoring, alert triage, or incident response.

Why hire me Link to heading

Completed the Google Cybersecurity Professional Certificate, covering SIEM tools, threat detection, and incident response fundamentals
6 months of internship experience in security monitoring and structured incident documentation
Practical grounding in CCNA-level networking and CEH ethical hacking concepts
Currently pursuing CompTIA Security+ and TryHackMe SOC Level 1 for hands-on validation
Comfortable with Windows and Linux administration, log analysis, and clear written communication for non-technical stakeholders

Download my resume Link to heading

📄 Download Resume (PDF)

Networking & Security Explained: TCP Handshake, VPNs, DNS Attacks, and APTs - Part 10

Sun, 26 Jul 2026 10:30:10 +0530

Networking & Security Fundamentals Link to heading

IP Address Basics Link to heading

An IP address is a unique numerical identifier assigned to every device on a network.

Communication occurs through IP packets.
Data is broken into packets, sent, and reassembled at the destination.
Each packet has a header (control info) and payload (data).

Encapsulation Process:
Data moves down the OSI stack → each layer adds its own header (Ethernet, IP, TCP, Application).

IPv4 Addressing & Subnetting Explained: IP Classes, MAC Addresses, and SOC Scenarios - Part 9

Sat, 25 Jul 2026 09:52:10 +0530

IPv4 Addressing & Networking Fundamentals Link to heading

IPv4 Addressing Link to heading

An IPv4 address (e.g., 192.168.1.10) is composed of 32 bits divided into four octets (8 bits each).

Each octet ranges from 0–255 (256 possible values).
Structured with a network portion and a host portion.
Example: 192.168.1.10 → 192.168.1 = network, 10 = host.

Analogy:
Network = colony in a city
Host = individual houses within that colony

OSI vs TCP/IP Models Explained: Protocols, Ports, and SOC Analysis - Part 8

Fri, 24 Jul 2026 09:58:10 +0530

Networking Fundamentals: OSI Model, TCP/IP, Protocols & Ports Link to heading

OSI (Open Systems Interconnection) Model Link to heading

The OSI model is a seven-layer framework that explains how data travels across a network. Each layer serves a specific function and helps in troubleshooting networking issues.

OSI Layers Link to heading

Physical Layer
- Cables, hardware transmission, electrical signals
Data Link Layer

Lateral Movement, Privilege Escalation, MITM & DoS: A Complete Cybersecurity Attack Guide - Part 7

Thu, 23 Jul 2026 10:49:10 +0530

Cybersecurity Concepts: Lateral Movement, Privilege Escalation, MITM & DoS Link to heading

Lateral Movement Link to heading

Lateral movement is the process of moving from one compromised system to another system within a network.

Why Attackers Perform Lateral Movement Link to heading

The first compromised system rarely contains valuable data.
Attackers must move across the network to reach their true targets.

Example Attack Path: Phishing email → User laptop compromise → Lateral movement → Domain controller → Full network control

Understanding Password Attacks, Hashing, and Encryption: A Comprehensive Guide for Security Analysts - Part 6

Wed, 22 Jul 2026 11:04:10 +0530

Understanding Password Attacks, Hashing, and Encryption: A Comprehensive Guide for Security Analysts Link to heading

Introduction Link to heading

In today’s cybersecurity landscape, understanding the various methods attackers use to compromise credentials is essential for any security professional. This guide covers password attack techniques, hashing mechanisms, encryption fundamentals, and how Security Operations Center (SOC) analysts can detect and respond to these threats.

Understanding Cyber Threats: Malware, Phishing, and Social Engineering for SOC Teams - Part 5

Tue, 21 Jul 2026 12:51:10 +0530

Introduction Link to heading

In today’s interconnected digital landscape, understanding the various types of cyber threats is essential for any security operations center (SOC) analyst. This article explores the most common forms of malware and social engineering attacks, providing both technical insights and practical detection strategies that security professionals can implement in their daily operations.

The Ultimate Guide to Cyber Security Frameworks and SOC Operations - Part 4

Mon, 20 Jul 2026 12:29:10 +0530

Comprehensive Guide to Cyber Security Frameworks and SOC Operations Link to heading

1. Cyber Kill Chain Framework Link to heading

The Cyber Kill Chain is a foundational cybersecurity framework developed by Lockheed Martin that models the stages of a cyber attack. This linear model maps the attacker’s journey from initial reconnaissance to achieving their final objectives, providing defenders with a clear understanding of how attacks unfold.

From Indicators to Insights: Mastering TTPs, IOCs, and Alert Triage in the SOC - Part 3

Mon, 20 Jul 2026 11:28:10 +0530

From Indicators to Insights: Mastering TTPs, IOCs, and Alert Triage in the SOC Link to heading

Introduction Link to heading

In the world of cybersecurity, understanding both the technical indicators of compromise and the behavioral patterns of attackers is essential for effective defense. This article explores three foundational concepts that every SOC analyst must master: Tactics, Techniques, and Procedures (TTPs) , Indicators of Compromise (IOCs) , and Alert Triage.

Mastering SOC Security: Attack Vectors, Vulnerabilities, and Best Practices - Part 2

Mon, 20 Jul 2026 10:32:10 +0530

Understanding Security Operations Centers and Cyber Vulnerabilities: A Comprehensive Guide Link to heading

Security Operations Center (SOC) Models Link to heading

When organizations decide to establish security monitoring capabilities, they typically choose from three primary SOC deployment models:

1. In-House (Internal) SOC Link to heading

An internal SOC represents a fully self-managed security operations capability. The organization builds and operates its own security team, utilizing its proprietary tools, processes, and personnel. This model offers maximum control and customization but requires significant investment in infrastructure, talent acquisition, and ongoing operational costs.

What is a SOC? The Core Role of the Blue Team in Cybersecurity - Part 1

Mon, 20 Jul 2026 09:52:10 +0530

The Role of a SOC L1 Analyst: The First Line of Cyber Defense Link to heading

In today’s threat landscape, cyberattacks are not a matter of “if,” but “when.” This is where the Security Operations Center (SOC) comes into play. At the heart of this defense mechanism is the SOC L1 Analyst—the first line of defense in an organization.

The primary objective of a SOC is to minimize “Dwell Time,” which refers to the duration an attacker remains undetected within a network. The longer an attacker stays hidden, the greater the risk of data breaches, which are often discovered only after customers or external agencies raise alarms. By then, the damage—both financial and reputational—can be catastrophic.

Autores de Hugo

Thu, 05 Jan 2023 01:15:52 +0100

temas

Wed, 04 Jan 2023 23:21:18 +0100

sintaxe

Wed, 04 Jan 2023 23:21:06 +0100

Códigos curtos

Wed, 04 Jan 2023 11:51:36 +0100

Projects

Mon, 01 Jan 0001 00:00:00 +0000

Nothing to see here… Move along!

Mohd Kashif | SOC Analyst

Windows Architecture for SOC Analysts: A Complete Guide to Detection & Investigation - Part 11

Windows Architecture Overview Link to heading

User Mode vs. Kernel Mode Link to heading

User Mode Link to heading

About

Hi, I’m Mohd Kashif 👋 Link to heading

Contact

Hire Me

Looking for a Level 1 SOC Analyst Link to heading

Why hire me Link to heading

Download my resume Link to heading

Networking & Security Explained: TCP Handshake, VPNs, DNS Attacks, and APTs - Part 10

Networking & Security Fundamentals Link to heading

IP Address Basics Link to heading

IPv4 Addressing & Subnetting Explained: IP Classes, MAC Addresses, and SOC Scenarios - Part 9

IPv4 Addressing & Networking Fundamentals Link to heading

IPv4 Addressing Link to heading

OSI vs TCP/IP Models Explained: Protocols, Ports, and SOC Analysis - Part 8

Networking Fundamentals: OSI Model, TCP/IP, Protocols & Ports Link to heading

OSI (Open Systems Interconnection) Model Link to heading

OSI Layers Link to heading

Lateral Movement, Privilege Escalation, MITM & DoS: A Complete Cybersecurity Attack Guide - Part 7

Cybersecurity Concepts: Lateral Movement, Privilege Escalation, MITM & DoS Link to heading

Lateral Movement Link to heading

Why Attackers Perform Lateral Movement Link to heading

Understanding Password Attacks, Hashing, and Encryption: A Comprehensive Guide for Security Analysts - Part 6

Understanding Password Attacks, Hashing, and Encryption: A Comprehensive Guide for Security Analysts Link to heading

Introduction Link to heading

Understanding Cyber Threats: Malware, Phishing, and Social Engineering for SOC Teams - Part 5

Understanding Malware Types and Social Engineering: A Comprehensive Guide for Security Professionals Link to heading

Introduction Link to heading

The Ultimate Guide to Cyber Security Frameworks and SOC Operations - Part 4

Comprehensive Guide to Cyber Security Frameworks and SOC Operations Link to heading

1. Cyber Kill Chain Framework Link to heading

From Indicators to Insights: Mastering TTPs, IOCs, and Alert Triage in the SOC - Part 3

From Indicators to Insights: Mastering TTPs, IOCs, and Alert Triage in the SOC Link to heading

Introduction Link to heading

Mastering SOC Security: Attack Vectors, Vulnerabilities, and Best Practices - Part 2

Understanding Security Operations Centers and Cyber Vulnerabilities: A Comprehensive Guide Link to heading

Security Operations Center (SOC) Models Link to heading

1. In-House (Internal) SOC Link to heading

What is a SOC? The Core Role of the Blue Team in Cybersecurity - Part 1

The Role of a SOC L1 Analyst: The First Line of Cyber Defense Link to heading

Autores de Hugo

temas

sintaxe

Códigos curtos

Projects