Threat Hunting: Get Started
Introduction Threat hunting (detecting and finding things that you weren't previously aware of) has been around for a long time and most 'medium maturity' organizations will attempt to set up some form of threat-hunting activity or progr…
The first blog
Hi, I do alot of research into threat hunting, detection engineering and security architecture. This place will be to store my loot (things I find interesting). Feel free to do whatever you like! I will try to keep the format of this blog as formal a…
Subscribe to:
Posts (Atom)
Popular
-
Introduction Tired of watching you and your friends get compromised, do exactly what's in this blog and start beating adversaries. Avoid... -
Introduction This document details how an analyst should conduct investigations and triage in the normal duties of their job. It will des...
-
Introduction This blog series will capture how to maximise the protection of an endpoint using the various technologies in the Defender su... -
Introduction Now that I have covered the advanced features obtained from Defender for Cloud and the complexities of Defender for Endpoint wi... -
Introduction Continuing on from my last post that captured using Defender for Cloud to gain powerful additional features on top of defender... -
Analysis In this post, I explain analysis and the associated techniques to mean at the lowest possible level a human’s ability to consume ...
-
Introductions How you as an analyst handle true positives is life and death in the eyes of potential victims. Traditionally the industry ele...
-
Introduction Making the leap to purchasing and maintaining an EDR solution can be huge for organisations so huge in fact that they never rea...
-
Introduction ❗take the time to read the bottom of this page. Proxmox is a virtualisation technology stack that is quickly becoming the...
-
Introduction This post outlines a format for note-taking designed to aid analysts and ensure the knowledge they acquire over time is kep...
