Endpoint Security Virtualisation PoV
How Bad Is It Really? A Field Guide to Endpoint Security Severity Summary: Endpoint security findings get mis-rated in both directions - a scary-sounding privilege label …
Detection Engineering
The Data Normalization Problem Nobody Talks About
If you have spent any meaningful time inside a Security Operations Centre - or have been responsible for one - you will know this feeling intimately. Alert fires. You …
Advanced Detection Engineering
Introduction I was going through the SANS material on detection engineering from multiple of their courses and I wanted to make a practical ready notes for the same. This …
SIEM Query Knowledgebase Document Template
Why I Created a SIEM Query Template In today’s fast-paced cybersecurity environment, managing SIEM queries effectively is paramount for timely threat detection and …
Navigating the R.O.A.D. from Threat Intelligence to Detection Rules
Overview of R.O.A.D. R.O.A.D. stands for: Raw Intelligence Gathering Organization & Analysis Actionable Detection Deployment & Refinement When combined with the six steps …