Day 2 of my SOC Analyst journey — and now I’m starting to see how the internet actually works behind the scenes.

Today’s focus was on the core networking concepts and commands that SOC analysts rely on during investigations and alert triage.

🧠 What I Covered

🌐 IP Addressing

Understanding how every device in a network is uniquely identified.

IPv4 & IPv6 basics

Source and Destination identification

Foundation of all network communication

🌍 DNS (Domain Name System)

Learning how domain names are converted into IP addresses.

Domain → IP resolution

Role of DNS in browsing and communication

How DNS can expose suspicious or malicious domains

🛠️ nslookup

A simple but powerful tool to query DNS records.

Used to check domain resolution

Helps analyze suspicious domains during investigations

Useful for quick DNS verification

📡 ping

One of the most basic yet essential network tools.

Checks if a host is reachable

Measures response time (latency)

Helps identify connectivity issues

🧭…