Detect FYI - Medium

站点链接：https://detect.fyi?source=rss----d5fd8f494f6a---4

Detect FYI - Medium 2025-10-17 sysmon · threat-hunting · windows 阅读缓存

Hunting WMI Event Subscription Persistence

收藏阅读缓存
Detect FYI - Medium 2025-10-16 detection-engineering · cybersecurity 阅读缓存

Critical Asset Analysis for Detection Engineering

收藏阅读缓存
Detect FYI - Medium 2025-10-15 detection-engineering · dfir · incident-response 阅读缓存

Re-Writing the Playbook — A detection-driven approach to Incident Response

收藏阅读缓存
Detect FYI - Medium 2025-10-15 microsoft-sentinel · blue-team · kql 阅读缓存

Identifying File Exfiltration via RDP Sessions with KQL Queries (Dia de los Muertos Special)

收藏阅读缓存
Detect FYI - Medium 2025-10-03 security-operation-center · detection-engineering · threat-detection 阅读缓存

The missing link in MDR. Spoiler, it starts with a Detection Engineering framework.

收藏阅读缓存
Detect FYI - Medium 2025-10-03 kql · threat-hunting · microsoft-sentinel 阅读缓存

Threat Hunting sessions via AuthenticationProcessingDetails on AADSignInEventsBeta

收藏阅读缓存
Detect FYI - Medium 2025-10-03 kql · network · encryption 阅读缓存

Use KQL to Surface Non-Recommended TLS Parameters (IANA-based)

收藏阅读缓存
Detect FYI - Medium 2025-09-11 阅读缓存

Intelligence-Driven Detection Engineering: From Threat Intel to Detection-as-Code (with the Pyramid…

收藏阅读缓存
Detect FYI - Medium 2025-09-11 detection-engineering · threat-hunting · cybersecurity 阅读缓存

Detection Gaps: The Hidden Enemy in SOC Threat Hunting & Detection Engineering

收藏阅读缓存
Detect FYI - Medium 2025-09-09 threat-detection · managed-security-services · security-operation-center 阅读缓存

The Present and Future of Managed Detection and Response

收藏阅读缓存
Detect FYI - Medium 2025-09-08 threat-intelligence · threat-hunting · ioc 阅读缓存

The importance of match ratio using Threat Inteligence Feeds (combined with KQL Collectors)

收藏阅读缓存
Detect FYI - Medium 2025-09-07 detection-engineering · cybersecurity · blue-team 阅读缓存

Thoughts on the recent Ethereum smart contracts C2 abuse

收藏阅读缓存
Detect FYI - Medium 2025-08-29 microsoft · threat-hunting · microsoft-defender 阅读缓存

Monitor Event Logs & Trigger DefenderXDR Alerts Without Ingesting Data

收藏阅读缓存
Detect FYI - Medium 2025-08-29 cybersecurity · detection-engineering · ai 阅读缓存

Integrating and Prioritizing Response Automation in the Detection Lifecycle

收藏阅读缓存
Detect FYI - Medium 2025-08-25 threat-hunting · detection-engineering · cybersecurity 阅读缓存

Malicious Encoded PowerShell: Detecting, Decoding & Modeling

收藏阅读缓存
Detect FYI - Medium 2025-08-16 cybersecurity · information-technology · threat-intelligence 阅读缓存

Technical Analysis of SAP Exploit Script (Visual Composer “Metadata Uploader” Exploit)…

收藏阅读缓存
Detect FYI - Medium 2025-07-28 kql · forensics · ransomware 阅读缓存

Protecting the Evidence in Real-Time with KQL Queries

收藏阅读缓存
Detect FYI - Medium 2025-07-12 threat-detection · detection-engineering · blue-team 阅读缓存

On Confidence

收藏阅读缓存
Detect FYI - Medium 2025-07-04 defender · blue-team · threat-hunting 阅读缓存

Identifying Ransomware Final Stage activities with KQL Queries

收藏阅读缓存
Detect FYI - Medium 2025-06-25 threat-hunting · threat-intelligence · cybersecurity 阅读缓存

Hunting Fileless Malware in the Windows Registry

收藏阅读缓存
Detect FYI - Medium 2025-06-16 threat-hunting · kql · threat-intelligence 阅读缓存

Differentiating between IoC , IaC and indicators of fraud

收藏阅读缓存
Detect FYI - Medium 2025-06-14 best-practices · splunk · splunk-administration 阅读缓存

Splunk ES Correlation Searches (Rules) Best & Cool Practices

收藏阅读缓存
Detect FYI - Medium 2025-06-14 security-analytics · threat-hunting · quick-wins 阅读缓存

Security Analytics: How to rank use cases based on the "Quick Wins" approach?

收藏阅读缓存
Detect FYI - Medium 2025-06-04 cybersecurity · ddos · kql 阅读缓存

Identifying potential DDoS cases based on ASN with KQL Queries

收藏阅读缓存
Detect FYI - Medium 2025-06-03 cybersecurity · threat-hunting · technology 阅读缓存

Detecting Malicious C2 Server Traffic via Google Calendar Phishing Attack Using Wazuh & Suricata

收藏阅读缓存
Detect FYI - Medium 2025-06-02 cybersecurity · siem · blue-team 阅读缓存

Do you know your Detection Surface?

收藏阅读缓存
Detect FYI - Medium 2025-05-22 scheduled-tasks · threat-hunting · powershell 阅读缓存

Hunting Scheduled Tasks

收藏阅读缓存
Detect FYI - Medium 2025-05-12 blue-team · detection-engineering 阅读缓存

Detection Pitfalls You Might Be Sleeping On

收藏阅读缓存
Detect FYI - Medium 2025-05-07 threat · kql · file-management 阅读缓存

Detection Response by tracing File Lineage with KQL Queries

收藏阅读缓存
Detect FYI - Medium 2025-05-05 cybersecurity · russia-ukraine-war · news 阅读缓存

A Timely Reminder: Russia’s Enduring Cyber Threat to Critical Infrastructure

收藏阅读缓存