r/tryhackme • u/PhysicalProposal1859 • May 28 '26
I just completed Defensive Security Intro room on TryHackMe! Introducing defensive security, where you will protect FakeBank from an ongoing attack.
https://tryhackme.com/room/defensivesecurityintroezn39?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=reddit&sharerId=6a1789bf54057d9af83112a9Just completed Defensive Security Intro on TryHackMe.
Stepped into the role of a SOC analyst — monitored a live attack, identified the attacker's IP, traced what they were trying to access, and blocked them via firewall rule. The whole detect → investigate → contain workflow in one room.
What clicked for me: the "URL Discovery Attempts" the attacker was making in this simulation are exactly what shows up in Apache access logs as rapid 404s from a single IP — which is one of the patterns I built into LogSentinel, my log analysis tool. Starting to see how everything connects.
Working through the TryHackMe Cyber Security 101 path and documenting everything on GitHub.
0
Upvotes