Cybersecurity Case Management Experience

As part of my continuous hands-on training in cybersecurity, I have investigated and resolved multiple real-world simulated incidents on the LetsDefend platform. These cases span across malware analysis, phishing investigations, network traffic anomalies, and suspicious user behavior. Each case helped me sharpen my analytical thinking, improve my threat detection skills, and gain practical experience using industry standard tools like SIEM, EDR, and sandbox environments. Below is a list of selected cases I have worked on:


SOC165 – Possible SQL Injection Payload Detected
SOC146 – Phishing Mail Detected – Excel 4.0 Macros
SOC170 – Passwd Found in Requested URL
SOC246 – Forced Authentication Detected
SOC251 – Quishing Detected (QR Code Phishing)
SOC175 – PowerShell Found in Requested URL – Possible CVE-2022-41082 Exploitation
SOC292 – Possible PHP Injection Detected (CVE-2024-4577)
SOC176 – RDP Brute Force Detected
SOC210 – Possible Brute Force Detected on VPN
SOC338 – Lumma Stealer – DLL Side-Loading via Click Fix Phishing
SOC202 – FakeGPT Malicious Chrome Extension
SOC235 – Atlassian Confluence Broken Access Control 0-Day CVE-2023-22515
SOC227 – Microsoft SharePoint Server Elevation of Privilege – Possible CVE-2023-29357 Exploitation
SOC287 – Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]
SOC335 – CVE-2024-49138 Exploitation Detected
SOC336 – Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025-21298)