threatpunter

From soup to nuts: Building a Detection-as-Code pipeline

Part 2 of 2

From soup to nuts: Building a Detection-as-Code pipeline

Part 1 of 2

Threat hunting in Okta logs

Threat hunting tips to help blue teams defend their Okta Single Sign-On…

Testing your Okta visibility and detection with Dorothy and Elastic Security

Detecting Adversary Tradecraft with Image Load Event Logging and EQL

Detecting & Removing WMI Persistence

Windows Management Instrumentation (WMI) Event Subscription is a…

Detecting Attempts to Steal Passwords from Memory

Detecting Attempts to Steal Passwords from the Registry

How to Setup “Cowrie” — An SSH Honeypot

Cowrie is a medium interaction SSH and Telnet honeypot, which can log brute force attacks…