This is my first blog post and my first write-up after completing a hands-on cybersecurity lab, so I wanted to keep things simple and honest.

I recently completed my first module on the KC7 platform, and I decided to start documenting what I’m learning as I go. The module was called “A Rap Beef,” and while the theme was fun and creative, the investigation itself felt very real.

By the end of the module, I scored a 950, but more importantly, I got my first real experience working through a SOC-style investigation.

 

What the Module Was Like

 

At the beginning, everything looked pretty normal. As I started digging into the logs, though, I realized that not everything added up. That was one of my first lessons from this lab. I realized suspicious activity isn’t always obvious right away.

Instead of being told exactly what to do, I had to look through log data, pay attention to small details, and slowly figure out what mattered. It forced me to slow down and think through each step instead of rushing to an answer.

 

Learning About Queries

 

One of the biggest things I learned during this module was how to run queries and why they are so important in a SOC environment.

Before this, logs mostly just looked like a lot of information on a screen. Running queries helped me narrow things down so I wasn’t trying to look at everything at once. I could focus on specific users, events, or timeframes and start to notice patterns that didn’t look normal.

This helped me understand that SOC work is really about knowing how to search for information and ask the right questions, instead of just scrolling through data and hoping something stands out.

 

What I Took Away From This Module

 

This module taught me that attention to detail matters, and that small things in logs can lead to bigger discoveries. It also showed me that it’s okay not to know everything right away, as long as you’re willing to investigate and learn.

It made the idea of working in a SOC feel less intimidating and more like problem-solving.

 

Why I Liked Using KC7

 

What I like about KC7 so far is that it doesn’t just explain concepts, it lets you practice them. As someone new to cybersecurity, being able to actually do the work made everything easier to understand.

Instead of just reading about SOC investigations, I got to experience what they actually feel like.

 

What’s Next

 

This is my first KC7 write-up, but it won’t be my last. I plan to keep working through more modules and continue posting about what I learn along the way.

My goal is to get more comfortable with log analysis, queries, and investigations while slowly building the skills needed for a future SOC role.

If you’re also new to cybersecurity or SOC work, I think KC7 is a great place to start. I’m excited to see how much I improve as I keep going.