Kyrian Marcelenous | SOC Analyst

SOC Analyst | Blue Team
TryHackMe Labs • SIEM • MITRE ATT&CK
Phishing & Threat Detection
LinkedIn ↓

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

Starting my SOC analyst journey here 🛡️

Hands-on TryHackMe blue-team labs: ELK/Splunk log hunting, MITRE ATT&CK mapping, phishing forensics, EDR triage.

All write-ups & screenshots on GitHub: https://t.co/wnaoOqI1DF

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

@AtunesCoding Congratulations

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

@NetworkQueenX Congratulations 🎉

[LetsDefend @LetsDefendIO]

SOC Analyst on Holiday

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

@KevTechSupport 😂

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

@TheCryptoBolt Security+ but it's a bit costly

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

@MissPookems Probably death stranding

[Mak @mak_aura]

I'm kinda on her side idk 🤷‍♂️

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

@mak_aura @Be_like_legend The legendary one coin lady 😅

[LetsDefend @LetsDefendIO]

Malware Analyst

[LetsDefend @LetsDefendIO]

Friends of SOC Analysts

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

Attackers don't name things "malware.exe". 🔍

They name it update.exe. Data Protection Service. AmazonSync. support.

Persistence detection isn't about suspicious names. It's about knowing your baseline.

Full breakdown 👇 https://t.co/b0TYtjAeIE
#SOC #BlueTeam #CyberSecurity

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

Bro this INC Ransom note is terrifying 😭

Stole the data, encrypted everything, and said pay or we leak it all. Dropped Tor links + Twitter like it’s support 😂

Imagine seeing this at work...

Never paying tho. Stay safe.
#Ransomware #CyberSecurity #staysafe

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

After Initial Access — the real attack begins.

Discovery. Collection. Exfiltration.
All automated. All logged by Sysmon.

The attacker even checked for EDR before proceeding. 👀

Full breakdown 👇 https://t.co/jV1JlAuIlE
#SOC #BlueTeam #CyberSecurity #OpenToWork

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

Brute forced in. Backdoor created. Malware dropped. C2 established.

The logs saw all of it.

Security logs. Sysmon. PowerShell history.
Three sources. One complete attack chain. Nothing missed.
Full breakdown 👇 https://t.co/PfrOyG6IIn
#SOC #BlueTeam #CyberSecurity #OpenToWork

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

Detected and analyzed a Web DDoS attack using access logs and traffic patterns.

Investigated high-volume requests, suspicious User-Agents, and flood behavior targeting the web application.

Full SOC investigation with detection logic and findings:
https://t.co/il4jVTdM86
#SOC

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

@ireteeh Count me in! 🙋‍♂️ I really appreciate the help

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

@_itz_joe

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

Reconstructed a full web attack chain from logs + PCAP 🔍
FFUF → Hydra → SQLi → Data exfiltrated
Logs showed the pattern. PCAP revealed the credentials.
Full breakdown 👉https://t.co/upLkvKTayN
#CyberSecurity #SOC #BlueTeam #OpenToWork

[TheCyberPatronNetwork © @TheCyberPatron_]

🥹 what level are you

[Kyrian Marcelenous | SOC Analyst @KyrianMax]

@segoslavia @tryhackme well done