Abshir Hirsi

Cybersecurity Founder & CEO @ShirmoTech | Helping businesses prevent breaches & secure their operations | Threat intel, risk management & practical advice

[Abshir Hirsi @abshir202]

🚨 IDS vs IPS

IDS:
👀 Detects attacks
📢 Sends alerts

IPS:
👀 Detects attacks
🛑 Blocks attacks

Easy way to remember:

IDS = Detect
IPS = Prevent

#CyberSecurity #IDS #IPS #SOC

[Abshir Hirsi @abshir202]

🔥 Firewalls

A firewall monitors and controls network traffic based on security rules.

Its goal:
✅ Allow legitimate traffic
❌ Block unauthorized access

Think of a firewall as a security guard standing between your network and potential threats.

#CyberSecurity #Firewall

[Abshir Hirsi @abshir202]

@alex_lrz_nmv You don’t know what SOC is?

[Abshir Hirsi @abshir202]

🔐 Password Spraying

Password spraying attacks try one common password across many accounts.

Unlike brute force:
❌ Many passwords → one account
✅ One password → many accounts

Strong passwords and MFA are critical defenses.

#CyberSecurity #PasswordSecurity #MFA

[Abshir Hirsi @abshir202]

🔑 Credential Stuffing

Credential stuffing uses stolen usernames and passwords from previous breaches to access other accounts.

Why it works:
People reuse passwords.

Best defense:
✅ Unique passwords
✅ MFA
✅ Password managers

#CyberSecurity #MFA #IdentitySecurity

[Abshir Hirsi @abshir202]

@StaySafeOnline Using the public WiFi is one of the most common vulnerabilities!

[Abshir Hirsi @abshir202]

🌐 MITM Attacks

A Man-in-the-Middle (MITM) attack occurs when an attacker secretly intercepts communication between two parties.

Common goal:
🔓 Steal information
🔓 Capture credentials

Always use secure connections and trusted networks.

#CyberSecurity #MITM

[Abshir Hirsi @abshir202]

👤 Insider Threats

Insider threats come from people who already have authorized access.

They may be:
• Malicious
• Negligent
• Accidental

Security isn’t only about keeping attackers out—it’s also about managing trusted access responsibly.

#CyberSecurity #InsiderThreat

[Abshir Hirsi @abshir202]

Trojan vs. Worm

🐴 Trojan = Malware disguised as legitimate software.

🪱 Worm = Malware that spreads automatically across networks.

Easy way to remember:

Trojan tricks users.
Worm moves on its own.

#CyberSecurity #Malware #InfoSec

[Abshir Hirsi @abshir202]

🔒 Ransomware

Ransomware encrypts files and demands payment for their release.

Best defenses:
✅ Backups
✅ Security awareness
✅ Regular patching
✅ Endpoint protection

The best time to prepare for ransomware is before it happens.

#CyberSecurity #Ransomware #InfoSec

[Abshir Hirsi @abshir202]

Phishing attacks

Phishing attacks trick users into revealing passwords, financial data, or sensitive information through fake emails, websites, or messages.

Watch for:
• Urgent requests
• Suspicious links
• Unexpected attachments

Cybersecurity starts with awareness.

[Abshir Hirsi @abshir202]

🛡️ Zero Trust

Zero Trust follows a simple principle: “Never Trust, Always Verify.”

Every user, device, and application must prove they should have access. Trust is never assumed, even inside the network. This approach reduces risk and strengthens modern cybersecurity defenses.

[Abshir Hirsi @abshir202]

🔑 Authentication vs Authorization

Authentication: "Who are you?"

Authorization: "What can you access?"

You authenticate using a password, fingerprint, or security key. Once verified, authorization determines what resources and permissions you receive within the system.

[Abshir Hirsi @abshir202]

🔐CIA Triad

The foundation of cybersecurity is the CIA Triad:
• Confidentiality – Protect sensitive data
• Integrity – Ensure data remains accurate
• Availability – Keep systems accessible

Understanding the CIA Triad helps explain why organizations invest in cybersecurity.

[Abshir Hirsi @abshir202]

Just completed the Cybersecurity Defense Analyst Career Path and passed the exam 🎉

Learned a lot about:

• SOC operations
• Threat detection
• SIEM & log analysis
• Hypothesis-driven threat hunting

#cybersecurity #infosec #blueteam #

[Abshir Hirsi @abshir202]

Completed “Splunk: Data and Tools for Defense Analysts.”

Learned how SOC analysts use logs, network data, endpoint telemetry, and SIEM tools to detect and investigate cyber threats in real-world environments.

#Cybersecurity #Splunk #SOC #SIEM #BlueTeam

[Abshir Hirsi @abshir202]

Completed Chapter 4: Introduction to Splunk.

Learned how to search, analyze, investigate, and visualize security data using Splunk dashboards, reports, and queries.

Halfway through the pathway — 4/8 complete.

#Splunk #Cybersecurity #SIEM #SOC #BlueTeam

[Abshir Hirsi @abshir202]

Completed Chapter 3: Security Operations and the Defense Analyst.

Learned how SOC teams operate, incident response workflows, analyst roles, and key metrics like MTTD, MTTR, and dwell time.

#Cybersecurity #SOC #IncidentResponse #BlueTeam

[Abshir Hirsi @abshir202]

Completed Chapter 2: Understanding Threats and Attacks.

Focused on attacker tactics, malware, phishing, ransomware, and the MITRE ATT&CK framework used in real-world security operations.

#Cybersecurity #ThreatDetection #SOC #BlueTeam