Olaf Hartong
Olaf Hartong

Olaf Hartong

FalconForce | DFIR | Threat hunter | Data Dweller | Splunk | Sysmon | Microsoft MVP

Editor of FalconForce and BlueTeamLabs
35 Following
725 Followers

Featured

Olaf Hartong
Jun 7, 2018 · 5 min read

Endpoint detection Superpowers on the cheap — part 1

Image for post
Image for post

378

2 responses

Latest

Olaf Hartong
Jul 16 · 8 min read
Image for post
Image for post

Using Azure Pipelines to validate my Sysmon configuration

56

Olaf Hartong
Jun 24 · 3 min read
Image for post
Image for post

Sysmon 11.1 Bug fixes, a schema update and a new field

14

Olaf Hartong
May 28 · 5 min read
Image for post
Image for post

Graphing MITRE ATT&CK via Bloodhound

I’ve been using slides like the image below for some time now in presentations and I regularly…

54

Olaf Hartong
Apr 28 · 7 min read
Image for post
Image for post

Sysmon 11 — DNS improvements and FileDelete events

118

1 response
Olaf Hartong
Mar 31 · 3 min read
Image for post
Image for post

The ATT&CK Rainbow of Tactics

I’ve been a huge fan of MITREs ATT&CK framework ever since its release. It has been of enormous value to…

90

1 response