Threat intel, DFIR
and security notes
Deep-dives, investigation write-ups, tooling notes and transparent product updates from the mlab team. Written for analysts who want the indicators, the method and the fix.
#career
Newest first
Learning CTI and SOC Skills for Free: A Student Roadmap
You do not need a paid bootcamp to become a credible junior analyst. The best free resources for threat intelligence and SOC skills, how to sequence them, and how to turn lab work into a portfolio that hiring managers actually read.
SOC L1/L2 Revision Guide: What to Know Cold Before the Interview
The concepts every SOC analyst interview probes: ports, protocols, HTTP codes, Windows event IDs, Sysmon, regex and CIDR. A compact revision sheet plus sample questions and how strong candidates answer them.
So You Want to Be a SOC Analyst: A Realistic Starting Roadmap
What the job actually looks like, the four skills that matter more than any certification, home-lab ideas that cost nothing, and where the role leads after year two.
inkdex: an index that states facts, a scanner that judges them
Studies, benchmarks and build notes. Method first, numbers included, losses too.
Read the latest note