Reposted by GianniRandy @irishdeath.bsky.social · 17/12/2024#DFIR and #ThreatHunting friends - the technical detail in this blog is pure gold for hunting and writing detections - even if you don't count TA397 high in your threat model, the techniques they use are not unique and the detections still apply: www.proofpoint.com/us/blog/thre... 021
Reposted by GianniFalconForce @falconforce.nl · 16/12/2024Join @olafhartong.nl in his journey down the rabbit hole in search of new detection opportunities in the #Zeek telemetry embedded in Microsoft's EDR #MDE! Detection engineering is sometimes hard … 😎 falconforce.nl/detection-en... #detectionengineering #kql #blueteam 053
Reposted by GianniDino @dinodunn.bsky.social · 29/11/2024www.elastic.co/security-lab... - great read on maturity model for Detection Engineering. #infosec #cybersecurity #cyber #Detectionelastic.coElastic releases the Detection Engineering Behavior Maturity Model — Elastic Security LabsUsing this maturity model, security teams can make structured, measurable, and iteritive improvements to their detection engineering teams.. 021
