🛡️ THM-WriteUps

TryHackMe room write-ups by OPT4RUN

This repository contains my personal write-ups for TryHackMe rooms. Each write-up documents my approach, tools used, and key learnings — organized by learning path.

---

👤 Author

Field	Details
Alias	OPT4RUN
TryHackMe Profile	tryhackme.com/p/OPT4RUN
GitHub	OP-T4RUN/THM-WriteUps

---

📁 Repository Structure

THM-WriteUps/
│
├── README.md                  ← You are here
│
├── SOC-Level-2/
│   ├── README.md              ← Path overview + room index
│   └── <Room-Name>/
│       ├── README.md          ← Write-up
│       ├── task2.png          ← Screenshots stored alongside write-up
│       └── ...
│
├── Advanced-Endpoint-Investigations/
│   ├── README.md              ← Path overview + room index
│   └── <Room-Name>/
│       ├── README.md          ← Write-up
│       ├── task2-01.png       ← Screenshots stored alongside write-up
│       └── ...
│
└── Other/
    ├── README.md
    └── <Room-Name>/
        ├── README.md
        └── ...

---

🗺️ Write-Up Index

🔵 SOC Level 2 Path ✅

#	Room	Category	Difficulty	Status
1	x86 Architecture Overview	Malware Analysis	Easy	✅
2	x86 Assembly Crash Course	Malware Analysis	Medium	✅
3	Dissecting PE Headers	Malware Analysis	Medium	✅
4	Basic Static Analysis	Malware Analysis	Medium	✅
5	MalBuster	Malware Analysis	Medium	✅
6	Advanced Static Analysis	Malware Analysis	Medium	✅
7	Basic Dynamic Analysis	Malware Analysis	Medium	✅
8	Dynamic Analysis: Debugging	Malware Analysis	Medium	✅
9	Anti-Reverse Engineering	Malware Analysis	Medium	✅
10	MalDoc: Static Analysis	Malware Analysis	Medium	✅
11	CALDERA	Threat Emulation	Hard	✅

---

🟢 Advanced Endpoint Investigations Path 🔄

Module 1 — File System Analysis ✅

#	Room	Category	Difficulty	Status
1	MBR and GPT Analysis	Digital Forensics	Medium	✅
2	FAT32 Analysis	Digital Forensics	Hard	✅
3	NTFS Analysis	Digital Forensics	Medium	✅
4	EXT Analysis	Digital Forensics	Medium	✅
5	File Carving	Digital Forensics	Medium	✅
6	Diskrupt	Digital Forensics	Hard	✅

---

Module 2 — Linux Endpoint Investigation ✅

#	Room	Category	Difficulty	Status
1	Linux Incident Surface	Digital Forensics / IR	Easy	✅
2	Linux Process Analysis	Digital Forensics / IR	Easy	✅
3	Linux Logs Investigations	Digital Forensics / IR	Medium	✅
4	Linux Live Analysis	Digital Forensics / IR	Medium	✅
5	IronShade	Digital Forensics / IR	Medium	✅

---

Module 3 — Windows Endpoint Investigation ✅

#	Room	Category	Difficulty	Status
1	Windows Incident Surface	Digital Forensics / IR	Medium	✅
2	Compromised Windows Analysis	Digital Forensics / IR	Easy	✅
3	Windows User Account Forensics	Digital Forensics / IR	Medium	✅
4	Windows User Activity Analysis	Digital Forensics / IR	Medium	✅
5	Expediting Registry Analysis	Digital Forensics / IR	Medium	✅
6	Windows Applications Forensics	Digital Forensics / IR	Medium	✅
7	Windows Network Analysis	Digital Forensics / IR	Easy	✅
8	Logless Hunt	Digital Forensics / IR	Medium	✅
9	Blizzard	Digital Forensics / IR	Medium	✅

---

Module 4 — macOS Forensics ✅

#	Room	Category	Difficulty	Status
1	macOS Forensics: The Basics	Digital Forensics / IR	Easy	✅
2	macOS Forensics: Artefacts	Digital Forensics / IR	Hard	✅
3	macOS Forensics: Applications	Digital Forensics / IR	Hard	✅
4	Mac Hunt	Digital Forensics / IR	Medium	✅

---

Module 5 — Mobile Analysis ✅

#	Room	Category	Difficulty	Status
1	Mobile Acquisition	Digital Forensics / IR	Easy	✅
2	Android Analysis	Digital Forensics / IR	Easy	✅
3	iOS Analysis	Digital Forensics / IR	Easy	✅

---

Module 6 — Memory Analysis ✅

#	Room	Category	Difficulty	Status
1	Memory Analysis Introduction	Digital Forensics / IR	Easy	✅
2	Memory Acquisition	Digital Forensics / IR	Easy	✅
3	Volatility Essentials	Digital Forensics / IR	Medium	✅
4	Windows Memory & Processes	Digital Forensics / IR	Medium	✅
5	Windows Memory & User Activity	Digital Forensics / IR	Medium	✅
6	Windows Memory & Network	Digital Forensics / IR	Medium	✅
7	Linux Memory Analysis	Digital Forensics / IR	Medium	✅
8	Supplemental Memory	Digital Forensics / IR	Medium	✅

---

Module 7 — Disk Image Analysis ✅

#	Room	Category	Difficulty	Status
1	Intro to Cold System Forensics	Digital Forensics / IR	Easy	✅
2	Forensic Imaging	Digital Forensics / IR	Easy	✅
3	Autopsy	Digital Forensics / IR	Easy	✅
4	DiskFiltration	Digital Forensics / IR	Hard	✅
5	ExfilNode	Digital Forensics / IR	Medium	✅

---

Module 8 — Honeynet Collapse 🔄

#	Room	Category	Difficulty	Status
1	Initial Access Pot	Digital Forensics / IR	Hard	✅

---

🗂️ Other Rooms

#	Room	Category	Difficulty	Status
—	(coming soon)	—	—	—

---

📌 Status Legend

Icon	Meaning
✅	Write-up complete
🔄	In progress
🔒	Room completed, write-up pending

---

⚠️ Disclaimer

These write-ups are for educational purposes only.
All activities were performed in a legal, controlled environment provided by TryHackMe.
Do not use these techniques on systems you do not have explicit permission to test.

---

Last updated: October 2026