6
Vent: my SOC lead made me ditch my 47 tab splunk setup
Dude told me my browser tabs were a security risk because I was copy pasting hashes into random virustotal windows all day. Switched to a local notes file with a hotkey snippet tool and honestly my triage time dropped by like 20 minutes per alert. Anyone else get roasted for their workflow and find the annoying advice actually stuck?
1 comments
Log in to join the discussion
Log In1 Comment
irisross2d ago
Heard a DFIR podcast last week where someone said their whole team moved to terminal-based hashing and grep after a similar tab shaming incident, so this is definitely a thing. The notes file approach makes sense too, since it keeps everything in one searchable place instead of relying on browser autofill and memory. Sometimes the annoying advice is just a roundabout way of saying your old method was slower than you thought, even if it felt organized.
3