Analyst Reports

Case studies, investigations, and SOC-style SOC write-ups.

Welcome to my analyst report collection. These write-ups mirror how I structure real-world investigations in a SOC: executive summary first, then timeline, technical details, and recommendations.

AS-REP · Kerberos Authentication Investigation

DFIR · Windows-Event-Logs · Active-Directory · Kerberos

Analyst Write-Up · AS-REP Attack

DFIR Windows-Event-Logs Active-Directory Kerberos

Read report →

SOC227 — Microsoft SharePoint Server Elevation of Privilege

sharepoint · cve-2023-29357 · privilege-escalation

Analyst Write-Up · CVE-2023-29357 Investigation

sharepoint cve-2023-29357 privilege-escalation

Read report →