SOC Analyst, Level 1
Malek Badawi
SC-200, AZ-500, SC-300
Malek specialises in proactive threat hunting, behavioural analysis and identifying advanced attacker techniques using Microsoft Sentinel and Microsoft Defender.
Written by Malek Badawi
2 articles
Threat Research
The New Starter Who Isn't: Spotting North Korean IT Workers On Your Endpoints And In Entra
The FBI says North Korean IT workers are widening their facilitator networks. The signals a SOC can see on endpoints and in Entra, with hunting queries.
Threat ResearchHunting For CVE-2025-59287 Exploitation In Windows Server Update Services (WSUS)
CVE-2025-59287 is a critical deserialisation flaw in WSUS. How exploitation looks in practice, and how to hunt for it with behavioural indicators rather than static signatures.
Where to start
Talk to the people
Talk to the people
who do the work.
A demo against your own estate rather than a canned one, run by an analyst rather than a salesperson.