Sign In

Mostafa Yahia

Senior SOC Analyst Tier 2 and Threat Hunter at Cysiv MEA - GCIH - QRadar

Mostafa Yahia, associated with the LinkedIn username mostafa-yahia-701b4b15a, is a professional with a strong background in cybersecurity. Here are some key points about him:

Current Role

As of the latest information, Mostafa Yahia is a Senior Cybersecurity Consultant at IBM, focusing on Security Operations Center (SOC), threat hunting, and related areas.6

Expertise

He has a passion for cybersecurity incidents investigation and threat hunting. His expertise includes working in SOC environments and enhancing threat investigation skills.16

Education

Mostafa Yahia has been educated at the Information Technology Institute (ITI).1

Publications

He is the author of the book "Effective Threat Investigation for SOC Analysts," which provides comprehensive guidance for SOC analysts to refine their investigative skills. The book includes detailed chapters such as "Investigating Email Threats".237

Online Presence

Apart from LinkedIn, Mostafa Yahia also maintains a YouTube channel where he shares content related to his field of expertise.45

While the specific title "SOC Analyst Tier 2 and Threat Hunter at Cysiv MEA" is not mentioned in the current sources, his profile and posts indicate a strong alignment with these roles and responsibilities.

Highlights

Dec 2 · linkedin

in case you investigate a successful RDP login to a specific machine, note that only in the case of the RDP login the “Workstation Name” field in the “Network Information” section does not refer to the source machine name instead it refers to the name of the machine that recorded the event log (Target machine). be careful because such wrong information may miss leading your incident investigations. For the example in the screenshot, the “pbeesly” account logged on the “SCARNTON” hostname from the “172.18.39.2” source machine IP.  if you want to find the source machine name you can use the Event IDs 4778 or 4779 recorded in the security events instead.

Related Questions

What inspired Mostafa Yahia to write "Effective Threat Investigation for SOC Analysts"?
How has Mostafa Yahia's work at IBM influenced his career in cybersecurity?
What are some key takeaways from Mostafa Yahia's book on threat investigation?
How does Mostafa Yahia's role at Cysiv MEA differ from his previous positions?
What topics does Mostafa Yahia cover in his YouTube videos?
Mostafa Yahia
Mostafa Yahia, photo 1
Mostafa Yahia, photo 2
Add to my network

Location

Cairo, Egypt