🛡️ Cybersecurity CTF Writeups

CTF writeups and technical analysis from TryHackMe challenges — focused on blue team skills, SOC analysis, EDR triage, MITRE ATT&CK mapping, and detection engineering.

By: KuRo — SOC Analyst (Blue Team) | Morocco

---

📊 TryHackMe Progress

Category	Count
✅ Rooms Completed	1
🟢 Easy	1
🟡 Medium	0
🔴 Hard	0

---

🎯 Focus Areas

• Endpoint Detection & Response (EDR)
• SOC Analysis & Alert Triage
• MITRE ATT&CK Mapping
• Threat Detection Engineering
• Log Analysis & SIEM (ELK Stack)
• Network Forensics & Intrusion Detection

---

🔍 Methodology

Each writeup contains:

• Room summary and learning objectives
• Key concepts and techniques learned
• Attack scenario analysis
• MITRE ATT&CK mapping
• Detection opportunities (Sigma rules / ELK)
• Lessons learned

---

🏗️ Repository Structure

ctf-writeups/
├── README.md
├── tryhackme/
│   ├── README.md
│   ├── easy/
│   │   └── introduction-to-edr/
│   │       ├── writeup.md
│   │       └── tools.md
│   ├── medium/
│   └── hard/
├── techniques/
│   ├── privilege-escalation.md
│   ├── sql-injection.md
│   ├── command-injection.md
│   ├── password-attacks.md
│   └── reverse-shells.md
└── tools/
    ├── nmap.md
    ├── gobuster.md
    ├── burpsuite.md
    └── linpeas.md

---

🌐 Platform

Currently focused on TryHackMe — SOC Level 1 path and blue team rooms.