🔍 Splunk Investigation: Tracing a Ransomware Attack Chain

During my SOC internship, I analyzed a simulated ransomware attack using Splunk to reconstruct the attack timeline and identify key indicators of compromise.

This investigation involved: • Log analysis and event correlation • IOC identification • Tracking attacker activity • MITRE ATT&CK mapping • Incident documentation

One of the most valuable lessons was learning how individual security events can be connected to reveal the bigger picture of an attack.

I've shared the full project in my portfolio for anyone interested in the investigation process and findings.

https://contra.com/p/oMY2LWoU-splunk-log-analysis-and-investigation-ransomware-chain?r=alkhal_vio107rc

#CyberSecurity #SOCAnalyst #Splunk #BlueTeam #ThreatDetection