HuntHex YouTube

Case files for the AI-era SOC

Become a SOC analyst
in the age of AI.

Real attacks, taken apart one log line at a time, and every level of the career explained honestly.

Cover of The SOC Analyst Roadmap 2026

Free download · 7 pages

The SOC Analyst Roadmap 2026

From zero to your first SOC job: what to learn and in what order, where to practise free, what it pays, and how AI is changing the job.

Free. Confirm your email and the download opens. Plus a short email when a new case file is out. Unsubscribe anytime. Privacy

Exhibit A · Sign-in log Simulated data
  1. 03:02:11j.haleLOGIN_OK 10.4.2.18
  2. 03:04:47svc_bkpTOKEN_REFRESH internal
  3. 03:05:09m.oseiLOGIN_OK 10.4.3.40
  4. 03:06:30r.patelPASSWORD_RESET helpdesk
  5. 03:09:14t.nguyenLOGIN_FAIL 10.4.2.77
  6. 03:12:03r.patelFound: MFA_ENROLL 203.0.113.45
  7. 03:12:40r.patelLOGIN_OK 203.0.113.45
  8. 03:13:02j.haleLOGOUT 10.4.2.18
Why this line: a help-desk password reset, then a brand-new MFA device from an outside address six minutes later. Same account, new owner.

Find the line that matters. That’s the job.