Hi, I’m Lyes, a SOC analyst focused on detection engineering.

This blog is my technical notebook:

• Infra & Architecture: my home lab, deployments and automation (Ansible);
• Detection Engineering & SOC: documented SPL detection rules mapped to MITRE ATT&CK;
• Writeups: lab and challenge walkthroughs (TryHackMe, BOTS, CyberDefenders…);
• Articles: a bit of everything else.

Find me

• LinkedIn: lyes-tibiche
• GitHub: github.com/poisonlylo
• RSS feed: feed.xml