👔 A recruiter? Live it, don't read it.
In 5 minutes you'll make 3 decisions a SOC analyst makes daily. No technical background needed. In each one you'll see the correct reasoning —and the tool Sergio built to solve it.
An employee receives this email:
- From: Micr0soft-Support <no-reply@account-verify.co>
- Subject: ⚠️ Your account will be suspended in 24h
- "Verify your password now" → hxxps://bit.ly/x9f2a
Is it phishing?
Yes. The signs are loud: a spoofed domain with a zero ("Micr0soft"), a sender that is not Microsoft, artificial urgency, a password request and a shortened link hiding the real destination. An attacker wants you to act fast and unthinking.
🔧 Sergio built the email (.eml) triage and the phishing dissector that flag these signals automatically.
A machine runs this command:
Should it worry you?
Yes. The "-enc" runs a Base64-encoded command (UTF-16LE) to hide what it does at a glance. Decoding it reveals the real intent —usually downloading and running something—. Obfuscating like this is rarely benign.
🔧 Sergio built the PowerShell decoder that reveals the hidden command and flags obfuscation patterns.
You have 500 vulnerabilities and cannot patch them all today:
- 500 open vulnerabilities
- Limited resources
- You must choose where to start
Which do you patch first?
The one being exploited now. CVSS measures theoretical severity, but not whether someone is using it. What is urgent is what appears in the active-exploitation catalog (CISA KEV) and what has a high exploit probability (EPSS): that is where the risk is real today.
🔧 Sergio built the Threat Radar (correlating KEV, EPSS and CVSS) and the patch-prioritization tool.
✅ You just thought like an analyst.
Three decisions, three tools. And Sergio built them all — he doesn't just use them: he made them. This is just a sample: