Standardized Note Taking Format For Analysts
Introduction This post outlines a format for
note-taking designed to aid analysts and ensure the knowledge they acquire over
time is kept so that it can easily be consumed later. This format is designed
to be technology agnostic so it can be applied …
Writing detections when stuck with EDR
Introduction Making the leap to purchasing and maintaining an EDR solution can be huge for organisations so huge in fact that they never really progress from there when it comes to visibility on assets. This is an important consideration because orga…
Securing your estate: The First Step
Introduction A commonly forgotten fact within the cybersecurity industry is that most organizations are not equipped nor have started to form any sort of security program. This is the case for many reasons because most organizations are SMBs so they …
Year in Review
Introduction I've put together some general observations and trends I've seen other the last year below. Overall I think the industry as a whole is in a transient or potentially post-shock stage where we are seeing some improvements but also…
Attack Simulations for your SOC
Introduction SOC analysts spend 99 percent of their time looking at the same data and patterns over and over again. They develop muscle memory that helps them use their platforms without much effort but also in grains in them potentially poor practi…
Shadow IT: Your Bible
Introduction If you have worked in IT for long enough, you would have stumbled across a handful of things that you know the user definitely shouldn't have. Well, that was likely "shadow IT". I describe shadow IT as "Anything techno…
Threat Hunting: Get Started
Introduction Threat hunting (detecting and finding things that you weren't previously aware of) has been around for a long time and most 'medium maturity' organizations will attempt to set up some form of threat-hunting activity or progr…
Subscribe to:
Posts (Atom)
Popular
-
Introduction Tired of watching you and your friends get compromised, do exactly what's in this blog and start beating adversaries. Avoid... -
Introduction This document details how an analyst should conduct investigations and triage in the normal duties of their job. It will des...
-
Introduction This blog series will capture how to maximise the protection of an endpoint using the various technologies in the Defender su... -
Introduction Now that I have covered the advanced features obtained from Defender for Cloud and the complexities of Defender for Endpoint wi... -
Introduction Continuing on from my last post that captured using Defender for Cloud to gain powerful additional features on top of defender... -
Analysis In this post, I explain analysis and the associated techniques to mean at the lowest possible level a human’s ability to consume ...
-
Introductions How you as an analyst handle true positives is life and death in the eyes of potential victims. Traditionally the industry ele...
-
Introduction Making the leap to purchasing and maintaining an EDR solution can be huge for organisations so huge in fact that they never rea...
-
❗take the time to read the bottom of this page. Introduction Proxmox is a virtualisation technology stack that is quickly becoming the...
-
Introduction This post outlines a format for note-taking designed to aid analysts and ensure the knowledge they acquire over time is kep...
