Year in Review

- December 22, 2022
Introduction I've put together some general observations and trends I've seen other the last year below. Overall I think the industry as a whole is in a transient or potentially post-shock stage where we are seeing some improvements but also…
READ MORE
Subscribe to: Posts (Atom)

Featured

Goblin Diary #2 - AI Tools for Analysts 🐯

Dont Use AI  Analyst work is built on the human capacity for creativity, memory recall and information gathering and using so called 'AI...

Popular

  • Brilliance in the Basics
    Introduction Tired of watching you and your friends get compromised, do exactly what's in this blog and start beating adversaries. Avoid...
  • Investigate
      Introduction This document details how an analyst should conduct investigations and triage in the normal duties of their job. It will des...
  • Endpoint on Adrenaline : One
    Introduction   This blog series will capture how to maximise the protection of an endpoint using the various technologies in the Defender su...
  • Endpoint on Adrenaline 3
    Introduction Now that I have covered the advanced features obtained from Defender for Cloud and the complexities of Defender for Endpoint wi...
  • Endpoint on Adrenaline Two
    Introduction Continuing on from my last post that captured using Defender for Cloud to gain powerful additional features on top of defender...
  • Investigate Three
     Analysis  In this post, I explain analysis and the associated techniques to mean at the lowest possible level a human’s ability to consume ...
  • Investigate Two
    Introductions How you as an analyst handle true positives is life and death in the eyes of potential victims. Traditionally the industry ele...
  • Writing detections when stuck with EDR
    Introduction Making the leap to purchasing and maintaining an EDR solution can be huge for organisations so huge in fact that they never rea...
  • Proxmox and Adversaries
    ❗take the time to read the bottom of this page. Introduction Proxmox is a virtualisation technology stack that is quickly becoming the...
  • Standardized Note Taking Format For Analysts
      Introduction This post outlines a format for note-taking designed to aid analysts and ensure the knowledge they acquire over time is kep...