We’re back with part two of a series analyzing how to align common GRC tasks/teams with SecOps and threat-informed defense practices.

People love the glossy version of purple teaming:

When I first wrote about Sliver beacons in purple teaming, the point was simple: implants aren’t just red-team toys, they’re teaching tools for defenders.

Sydney recently wrote a great piece about extensions and hunting for IDE plugins.

In a sea of millions of security events, one workstation literally stood out, floating high above all the others when I transformed flat logs into a 3D visualization.

Five baselines with hunt queries you can run today

Artist · 10 monthly listeners.

“Cool alert box, bro. Now what?”

Hey thrunters, gather ’round: timechart’s up

Abstract

Because "Everything's Fine" is Just Another Way of Saying "I Haven't Looked Yet"

Five hunt ideas (and one deep dive) for abuse hiding in plain sight.

Sherpa Intelligence: Your Guide Up a Mountain of Information!

TTPs that sparked, spread, and still burn for those paying attention.

How to turn a modern post-exploitation tool into your next detection engineering best friend.

Quiet logs, loud analysts, and AI besties. Just another month in the hunt.

Don’t just hunt, hunt with purpose.

SPL Dispatch #2 - 05/13/2025

Eliminating detection blind spots through a multi-layered defense approach

A follow-up to Simulate. Detect. Tune. Repeat.

What We Hunted, Learned, and Loved This Month

“Normal” is just a setting on a dryer. Let’s talk about what’s actually weird in your data.

There Can Only (Not) Be One

Purple Teaming with Atomic Red Team and ATT&CK

Practical Implementation of the LAYER approach