Severity ratings tell you what could happen. Asset context tells you what matters.
A medium finding on your internet-facing auth server usually outranks a high on an isolated test box.
Vulnerability management is risk management.
A medium finding on your internet-facing auth server usually outranks a high on an isolated test box.
Vulnerability management is risk management.
Why Medium Severity Can Outrank High
In a made-up scan, a high-severity finding sits on an isolated test machine and a medium one sits on an internet-facing web server that handles customer sign-ins. Which one gets the first hour, and why? #VulnerabilityManagement #SecurityAnalyst
www.youtube.com
November 2, 2026 at 12:56 PM
Severity ratings tell you what could happen. Asset context tells you what matters.
A medium finding on your internet-facing auth server usually outranks a high on an isolated test box.
Vulnerability management is risk management.
A medium finding on your internet-facing auth server usually outranks a high on an isolated test box.
Vulnerability management is risk management.
Your manager doesn't need every vulnerability. They need a starting order.
One line per item showing priority and reasoning. Plus notes on anything unconfirmed.
Context beats spreadsheets.
One line per item showing priority and reasoning. Plus notes on anything unconfirmed.
Context beats spreadsheets.
What to Tell Your Manager After a Vulnerability Scan
A starting order has one line on where and why each item sits, plus a note on anything still unconfirmed. #VulnerabilityManagement #SecurityAnalyst
www.youtube.com
November 2, 2026 at 5:31 PM
Your manager doesn't need every vulnerability. They need a starting order.
One line per item showing priority and reasoning. Plus notes on anything unconfirmed.
Context beats spreadsheets.
One line per item showing priority and reasoning. Plus notes on anything unconfirmed.
Context beats spreadsheets.
Before you prioritize vulnerability findings, check the scan itself.
What did it cover? Were systems offline? Did authentication work?
Many findings disappear once you verify what the scan actually saw.
What did it cover? Were systems offline? Did authentication work?
Many findings disappear once you verify what the scan actually saw.
What Did Your Vulnerability Scan Actually Scan?
Before you rank any findings, check the scan itself: what it covered, whether systems were offline, and whether the scanner could log in. Then flag findings that might not be real and ask the system owner to confirm. #VulnerabilityScan #SecurityAnalyst
www.youtube.com
November 2, 2026 at 12:15 AM
Before you prioritize vulnerability findings, check the scan itself.
What did it cover? Were systems offline? Did authentication work?
Many findings disappear once you verify what the scan actually saw.
What did it cover? Were systems offline? Did authentication work?
Many findings disappear once you verify what the scan actually saw.
When you write up a security finding, say what you assumed.
Don't present an assumption like a verified fact. That gives someone a chance to explain what you're missing instead of feeling like you're pointing fingers.
Don't present an assumption like a verified fact. That gives someone a chance to explain what you're missing instead of feeling like you're pointing fingers.
Say What You Assumed in a Security Write-Up
Don't present an assumption like a verified fact. Say what you haven't confirmed and what you're assuming. That gives someone a chance to explain what you might be missing instead of feeling like you're pointing fingers. The example is made up. #RiskStatement #SecurityAnalyst #GRC
www.youtube.com
October 31, 2026 at 11:15 PM
When you write up a security finding, say what you assumed.
Don't present an assumption like a verified fact. That gives someone a chance to explain what you're missing instead of feeling like you're pointing fingers.
Don't present an assumption like a verified fact. That gives someone a chance to explain what you're missing instead of feeling like you're pointing fingers.
A severity score tells you how serious a weakness is in general.
It doesn't know what's exposed in your environment, what matters, or what's already protected.
Context changes priority.
It doesn't know what's exposed in your environment, what matters, or what's already protected.
Context changes priority.
Why Vulnerability Severity Scores Aren't Enough
A severity score usually describes how serious a weakness is in general, on a typical system. Until your environment's context is filled in, it doesn't know what's exposed, what matters or what's already protected. #VulnerabilityManagement #SecurityAnalyst
www.youtube.com
November 1, 2026 at 5:31 PM
A severity score tells you how serious a weakness is in general.
It doesn't know what's exposed in your environment, what matters, or what's already protected.
Context changes priority.
It doesn't know what's exposed in your environment, what matters, or what's already protected.
Context changes priority.
Four AI labs proved isolated sandboxes fail. Your network has the exact same unverified blind spots right now. Get the info: www.extrahop.com/blog/isolate...
#cybersecurity #AI #securityanalyst #devops #secops #network #cloudsecurity #agenticsoc
#cybersecurity #AI #securityanalyst #devops #secops #network #cloudsecurity #agenticsoc
Isolated is Not a Security Control — ExtraHop
Four AI labs lost containment of their own models this year. The same unverified assumption already lives in four common enterprise access points.
www.extrahop.com
August 20, 2026 at 3:01 PM
Four AI labs proved isolated sandboxes fail. Your network has the exact same unverified blind spots right now. Get the info: www.extrahop.com/blog/isolate...
#cybersecurity #AI #securityanalyst #devops #secops #network #cloudsecurity #agenticsoc
#cybersecurity #AI #securityanalyst #devops #secops #network #cloudsecurity #agenticsoc
Looking for remote SOC/Detection Engineering roles. Immediate joiner
www.linkedin.com/posts/manish...
#Opentowork #SocAnalyst #ThreatHunter #Cybersecurity #JobHunt
www.linkedin.com/posts/manish...
#Opentowork #SocAnalyst #ThreatHunter #Cybersecurity #JobHunt
#opentowork #threathunting #detectionengineering #socanalyst #cybersecurityjobs #siem #splunk #blueteam #infosec #remotejobs #hiringnow #securityanalyst #cybersecurity #talentacquisition… | Manish Raw...
I analyzed 196,071 APT29 events and wrote detection rules that actually caught the attacks.
Now looking for remote SOC/Detection Engineering roles. Immediate joiner.
Two years hunting threats that mo...
www.linkedin.com
May 1, 2026 at 6:02 AM
Looking for remote SOC/Detection Engineering roles. Immediate joiner
www.linkedin.com/posts/manish...
#Opentowork #SocAnalyst #ThreatHunter #Cybersecurity #JobHunt
www.linkedin.com/posts/manish...
#Opentowork #SocAnalyst #ThreatHunter #Cybersecurity #JobHunt
My First False Positive |
I spent an hour investigating a lsass process in the APT29 dataset this week.
1,605 events. 14 EventIDs. Every search I ran came back clean.
Full Post is on LinkedIn: www.linkedin.com/posts/manish...
#Cybersecurity #Analysis #Splunk #Research #APT #SecurityAnalyst #SOC
I spent an hour investigating a lsass process in the APT29 dataset this week.
1,605 events. 14 EventIDs. Every search I ran came back clean.
Full Post is on LinkedIn: www.linkedin.com/posts/manish...
#Cybersecurity #Analysis #Splunk #Research #APT #SecurityAnalyst #SOC
#threathunting #splunk #apt29 #blueteam #detectionengineering #mitre #soc #falsepositive | Manish Rawat
I spent an hour investigating a lsass process in the APT29 dataset this week.
1,605 events. 14 EventIDs. Every search I ran came back clean.
Signed DLLs.
Legitimate file paths.
Normal GrantedAcces...
www.linkedin.com
April 6, 2026 at 7:33 AM
My First False Positive |
I spent an hour investigating a lsass process in the APT29 dataset this week.
1,605 events. 14 EventIDs. Every search I ran came back clean.
Full Post is on LinkedIn: www.linkedin.com/posts/manish...
#Cybersecurity #Analysis #Splunk #Research #APT #SecurityAnalyst #SOC
I spent an hour investigating a lsass process in the APT29 dataset this week.
1,605 events. 14 EventIDs. Every search I ran came back clean.
Full Post is on LinkedIn: www.linkedin.com/posts/manish...
#Cybersecurity #Analysis #Splunk #Research #APT #SecurityAnalyst #SOC
🚀 Join our team! We're hiring a Security Delivery Senior Analyst in Bengaluru, BDC14A. Elevate your career in a dynamic environment! #JobOpening #BengaluruJobs #SecurityAnalyst educativ.net/jobs/job/311...
February 3, 2025 at 12:01 PM
🚀 Join our team! We're hiring a Security Delivery Senior Analyst in Bengaluru, BDC14A. Elevate your career in a dynamic environment! #JobOpening #BengaluruJobs #SecurityAnalyst educativ.net/jobs/job/311...
🔍 Seeking a savvy Security Intelligence Senior Analyst to join BANAMEX in Mexico City 🇲🇽. Elevate your career in tactical and operational security with us! #JobOpening #MexicoCity #SecurityAnalyst educativ.net/jobs/job/301...
January 19, 2025 at 7:01 AM
🔍 Seeking a savvy Security Intelligence Senior Analyst to join BANAMEX in Mexico City 🇲🇽. Elevate your career in tactical and operational security with us! #JobOpening #MexicoCity #SecurityAnalyst educativ.net/jobs/job/301...
🔍 We're hiring! Join us as a Tactical & Operational Security Intelligence Senior Analyst at BANAMEX in Mexico City. Elevate your career with us! #JobOpportunity #MexicoCityJobs #SecurityAnalyst educativ.net/jobs/job/301...
January 19, 2025 at 5:53 AM
🔍 We're hiring! Join us as a Tactical & Operational Security Intelligence Senior Analyst at BANAMEX in Mexico City. Elevate your career with us! #JobOpportunity #MexicoCityJobs #SecurityAnalyst educativ.net/jobs/job/301...
Join our team at BANAMEX as a Senior Analyst in Tactical & Operational Security Intelligence in Mexico City! Dive deep into data-driven security strategies. #JobOpening #MexicoCity #SecurityAnalyst educativ.net/jobs/job/301...
January 19, 2025 at 4:57 AM
Join our team at BANAMEX as a Senior Analyst in Tactical & Operational Security Intelligence in Mexico City! Dive deep into data-driven security strategies. #JobOpening #MexicoCity #SecurityAnalyst educativ.net/jobs/job/301...
What if you could scale your SOC without hiring more senior analysts?
Huntbase makes every analyst perform like your best analyst. Consistent, expert-level investigations from day one.
#SOC #SOCAnalyst #BlueTeam #SecurityAnalyst #CyberAnalyst #ThreatHunting
Huntbase makes every analyst perform like your best analyst. Consistent, expert-level investigations from day one.
#SOC #SOCAnalyst #BlueTeam #SecurityAnalyst #CyberAnalyst #ThreatHunting
August 29, 2025 at 11:41 AM
What if you could scale your SOC without hiring more senior analysts?
Huntbase makes every analyst perform like your best analyst. Consistent, expert-level investigations from day one.
#SOC #SOCAnalyst #BlueTeam #SecurityAnalyst #CyberAnalyst #ThreatHunting
Huntbase makes every analyst perform like your best analyst. Consistent, expert-level investigations from day one.
#SOC #SOCAnalyst #BlueTeam #SecurityAnalyst #CyberAnalyst #ThreatHunting
January 30, 2025 at 6:10 PM
January 30, 2025 at 4:53 PM
January 30, 2025 at 4:52 PM
January 30, 2025 at 4:48 PM
January 30, 2025 at 12:21 AM
Want to boost your cybersecurity career?
The Palo Alto NetSec-Analyst Certification helps you prove real-world network-security expertise — and opens doors to analyst + SOC roles.
Start here:
🔗 www.nwexam.com/palo-alto/ne...
#NetSecAnalyst #Cybersecurity #PaloAlto #SecurityAnalyst
The Palo Alto NetSec-Analyst Certification helps you prove real-world network-security expertise — and opens doors to analyst + SOC roles.
Start here:
🔗 www.nwexam.com/palo-alto/ne...
#NetSecAnalyst #Cybersecurity #PaloAlto #SecurityAnalyst
December 26, 2025 at 10:03 AM
Want to boost your cybersecurity career?
The Palo Alto NetSec-Analyst Certification helps you prove real-world network-security expertise — and opens doors to analyst + SOC roles.
Start here:
🔗 www.nwexam.com/palo-alto/ne...
#NetSecAnalyst #Cybersecurity #PaloAlto #SecurityAnalyst
The Palo Alto NetSec-Analyst Certification helps you prove real-world network-security expertise — and opens doors to analyst + SOC roles.
Start here:
🔗 www.nwexam.com/palo-alto/ne...
#NetSecAnalyst #Cybersecurity #PaloAlto #SecurityAnalyst
Take a look to find out exactly what security analysts do, how they work and why they are vital in keeping your systems safe: zurl.co/DZZj3
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
Security analysts: how do they keep YOUR systems safe?
Security analysts are at the heart of SOC teams, working hard to detect, isolate and stop cyber threats before they can advance - find out more about them he...
zurl.co
June 19, 2025 at 2:00 PM
Take a look to find out exactly what security analysts do, how they work and why they are vital in keeping your systems safe: zurl.co/DZZj3
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
At Interfuture Security, our security analysts work 24/7 to ensure our clients' systems are protected. Find out what they do, and how they could help you: zurl.co/62qlD
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
March 28, 2025 at 11:30 AM
At Interfuture Security, our security analysts work 24/7 to ensure our clients' systems are protected. Find out what they do, and how they could help you: zurl.co/62qlD
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
Our last top 5 - we take a look at what it is a security analyst does. Get a look behind the scenes at Interfuture Security and how we take care of your cyber security!
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
March 27, 2025 at 11:31 AM
Our last top 5 - we take a look at what it is a security analyst does. Get a look behind the scenes at Interfuture Security and how we take care of your cyber security!
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
#cybersecurity #itsecurityoperations #itsecurity #socservices #securityanalyst #socanalyst
⚡️ NEW: Keep PlayStation's global security systems running!
💼 Physical Security Systems Analyst
🏢 PlayStation
🇬🇧 London, UK
📄 Contract
🎚️ Intermediate
💵 £225–£245/day
#PlayStation #SecurityAnalyst #GamingJobs
Apply here 👇
hitmarker.net/jobs/playst...
💼 Physical Security Systems Analyst
🏢 PlayStation
🇬🇧 London, UK
📄 Contract
🎚️ Intermediate
💵 £225–£245/day
#PlayStation #SecurityAnalyst #GamingJobs
Apply here 👇
hitmarker.net/jobs/playst...
hitmarker.net
July 14, 2026 at 1:15 AM
⚡️ NEW: Keep PlayStation's global security systems running!
💼 Physical Security Systems Analyst
🏢 PlayStation
🇬🇧 London, UK
📄 Contract
🎚️ Intermediate
💵 £225–£245/day
#PlayStation #SecurityAnalyst #GamingJobs
Apply here 👇
hitmarker.net/jobs/playst...
💼 Physical Security Systems Analyst
🏢 PlayStation
🇬🇧 London, UK
📄 Contract
🎚️ Intermediate
💵 £225–£245/day
#PlayStation #SecurityAnalyst #GamingJobs
Apply here 👇
hitmarker.net/jobs/playst...
ダラスにあるホテルに宿泊したら部屋に置いていた荷物がすべてなくなった人の記録「全くトラックできないセキュリティホールが存在している」
ダラスにあるホテルに宿泊したら部屋に置いていた荷物がすべてなくなった人の記録「全くトラックできないセキュリティホールが存在している」
hiro_ @papa_anniekey BMX Racer. And also,Securityanalyst/Architect/ex-researcher/Hobbiest. Tweet & article is my own. otx.alienvault.com/user/papa_anni… hiro_ @papa_anniekey 明日からダラスにまた移動です。ちょっと疲れた笑 今回2年ぶりにラスベガス来て感じたのは、アメリカを足元の景気は悪化してるのかな？ということ。お店の商品のラインナップが抑えられてたり、エンタメの集客がよくなかったり。 hiro_ @papa_anniekey この3日間、営業的な研修でした。アメリカン達と朝から晩までディスカションというなかなか辛いカリキュラム。内容はもちろんながら、研修に出席する姿勢がAPACとAMERは全く違く、カルチャーギ
togetter.com
August 19, 2024 at 9:30 AM
ダラスにあるホテルに宿泊したら部屋に置いていた荷物がすべてなくなった人の記録「全くトラックできないセキュリティホールが存在している」