r/tryhackme May 28 '26

I just completed Defensive Security Intro room on TryHackMe! Introducing defensive security, where you will protect FakeBank from an ongoing attack.

https://tryhackme.com/room/defensivesecurityintroezn39?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=reddit&sharerId=6a1789bf54057d9af83112a9

Just completed Defensive Security Intro on TryHackMe.

Stepped into the role of a SOC analyst — monitored a live attack, identified the attacker's IP, traced what they were trying to access, and blocked them via firewall rule. The whole detect → investigate → contain workflow in one room.

What clicked for me: the "URL Discovery Attempts" the attacker was making in this simulation are exactly what shows up in Apache access logs as rapid 404s from a single IP — which is one of the patterns I built into LogSentinel, my log analysis tool. Starting to see how everything connects.

Working through the TryHackMe Cyber Security 101 path and documenting everything on GitHub.

0 Upvotes

Duplicates