Super Intelligence·5h agoYou’ve Been Hacked. You Hand Your Executive Board This Report. Where Do You Send Your CV?Cybersecurity is no longer just an IT problem. It’s an executive accountability problem.
Praise Ameh·22h agoCyberDefenders — Phantom Installer Lab WriteupWelcome to my Phantom Installer writeup.
Furqan P.·2d agoMITRE ATT&CK v20 Is Here: AI Attacks Are Changing the Cybersecurity LandscapeFrom prompt injection and AI-enabled data theft to attacks on critical infrastructure, MITRE’s latest update highlights how the threat…
ivan ninichuck·4d agoAdvanced TIE (Part 1): Predicting the Adversary’s Next MoveStandardizing adversary tradecraft through MITRE ATT&CK gave the security community a foundational language to categorize behaviors…
ivan ninichuck·4d agoAdvanced TIE (Part 2): Inside the Spiking World ModelNote: This is Part 2 of a two-part series on the Advanced Technique Inference Engine (Advanced TIE). In Advanced TIE (Part 1): Predicting…
rebootingdaily·Oct 26Entry 2: Testing SSH detection rules with wazuh-logtest (simulated)Summary: I used wazuh-logtest to feed three made-up SSH log lines to Wazuh’s ruleset and see how each was decoded and scored. This was a…
edgar·Oct 26Simulating attacks with Atomic Red Team and mapping to MITRE ATT&CK (Part 3)Part 3 of the Sentinel lab series. Part 2 covered writing a detection rule for RDP brute force (T1110).
Abdulrahman Heza·Oct 25OSINT — MITRE (3) Lab | Incident Response & Threat Hunting WalkthroughIn this writeup, we will solve the OSINT — MITRE (3) challenge on Cyber Haze. The lab focuses on analyzing threat scenario text and mapping…
GUNASEELAN·Oct 245 Mistakes I Made Building My First Detection Rule (So You Don’t Have To Make Them First)Nobody tells you how uncomfortable it is to stare at a blank rule editor.
Luis Miguel Cordova Farias·Oct 20From a OneNote Attachment to a RAT: A SOC Analyst WalkthroughIn this article, I will walk through a hands-on investigation using SOCSimulator, a cybersecurity training platform. The exercise, “OneNote…
