Report Writing for SOC L2 | TryHackMe Write-up

Complete walkthrough for TryHackMe Report Writing for SOC L2. Master executive summaries, DFIR handover notes, and client incident reporting.

This is my write-up for the TryHackMe room on Report Writing for SOC L2. Written in 2026, I hope this write-up helps others learn and practice cybersecurity.

Task 1: Introduction

Moving into an L2 SOC analyst role means communicating findings outside the internal queue. L1 analysts log ticket notes; L2 analysts write structured incident summaries for lead…