Aspiring SOC Analyst
Alain Tran
A web developer by trade, I'm specialising in defensive cybersecurity.
After seven years in web development, I'm transitioning into a SOC analyst role. To build my skills, I'm creating a lab that recreates a small company's infrastructure, with Active Directory, Proxmox, pfSense and Wazuh.
My goal: to learn how to detect threats, analyse alerts and conduct investigations. I document my experiments, successes and the problems I encounter here.
The lab
A small company network, rebuilt at home
From web development to threat analysis, a documented journey of hands-on learning.
5 devices · 4/5 in service · Explore the lab →
Certifications
-
-
-
-
-
Education
Bachelor's degree in Computer Science (3rd year)
Cnam (Conservatoire national des arts et métiers) · Since September 2026
Latest write-ups
View all-
SOC336 - Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025-21298)
Detection and investigation of a confirmed Windows OLE zero-click RCE exploitation via a malicious RTF email. OUTLOOK.EXE spawned cmd.exe which executed regsvr32.exe to retrieve a remote payload from a C2 server. The proxy permitted the outbound request. Host was isolated and escalated to L2.
May 16, 2026 Critical #cve-2025-21298#windows-ole -
RDP Brute Force Attack on WIN-SERVER - Triage #001
Detection and investigation of an automated RDP brute force attack targeting the Administrator account on WIN-SERVER, originating from an internal Kali Linux machine.
Apr 19, 2026 Medium #brute-force#rdp