Engineering Detection Rules
Engineer threat detection rules: design, document, then code.
Review: Automating Security Detection Engineering
Review of Automating Security Detection Engineering book.
To Detect or Not to Detect
Guidelines for evaluating effective SOC detections.
Towards Actionable Detection
Actionable detection for relevant and contextual alerts.
Project Nebula: Debriefing
Final thoughts and improvements for the Nebula detection lab.
Project Nebula: Detecting with Elastic
Elastic Stack deployment for log monitoring.
Project Nebula: Detecting with Wazuh
Setting up Wazuh for log collection and detection rules.
Project Nebula: Build a Simple Detection Lab
Easy guide to setting up a simple detection engineering lab.
Review: Practical Threat Detection Engineering
Review of Practical Threat Detection Engineering book.
Auto-Cleaning Lists in Chronicle SIEM
Automate Chronicle SIEM list cleanup for expired items.
Endpoint Security Reflections feat. EDR
Comparing EDR with alternative endpoint solutions.
Integrating MISP with Chronicle SIEM
Integrate CTI and CSIRT automatically and efficiently.
Debunking Threat Detection Myths
Debunking threat detection myths for improved SecOps.
Improving SecOps Beyond Tuning Analytics
Improving SecOps through alert tuning, contextualization, and automation.
Review: The Cuckoo's Egg
A 1980s Infosec thriller with groundbreaking investigations.
