Threat Intelligence vs Threat Hunting: What is the Perfect Pipeline?
Discover how to integrate your cyber threat intelligence with your threat hunting tasks to create the perfect pipeline and streamline your operations.
Python Threat Hunting Tools: Part 1 — Why?
Learn how to build your own threat hunting tools with Python in this new series! First, let’s find out why it is important to build your own tools.
Free vs Paid Cyber Security Training: The Secret to Career Success
Training is vital for success in cybersecurity. Let's explore the options you have at your disposal and perhaps the best path to follow to achieve your goals.
Hunting for Persistence with Cympire: Part IV — Startup Folder
Learn how attackers use the Windows Startup Folder to maintain persistence once they’ve compromised a machine. Then hunt for these malicious Startup Folder items.
How to Arm Yourself with Custom Sigma Rules
Discover how to create your own custom Sigma rules to hunt for the latest threats that are affecting your environment and thwart threat actors.
Hunting for Persistence with Cympire: Part III — Services
Learn how attackers use Windows services to maintain persistence once they’ve compromised a machine. Then see how to hunt for these malicious services.
How to Arm Yourself with Threat Intelligence
Learn how to use threat intelligence articles, the MITRE ATT&CK framework, and Sigma rules to perform threat-informed hunting using Splunk queries.
Hunting for Persistence with Cympire: Part II — Scheduled Tasks
Learn how attackers use scheduled tasks to maintain persistence once they’ve compromised a machine. Then see how to hunt for these tasks.
MITRE ATT&CK Framework: Holy Bible of Threat Intelligence
Let's explore the MITRE ATT&CK framework and find out why it's a must know tool for any cyber threat intelligence analyst looking to tackle the latest threats.
Hunting for Persistence with Cympire: Part I — Registry Run Keys
Learn how attackers use Windows registry keys to maintain persistence once they’ve compromised a machine. Then see how to hunt for these malicious keys.
Elevate Your Threat Detections Using the Almighty Pyramid of Pain
Discover how to turn a bad guy's day into a nightmare using the Pyramid of Pain to elevate your threat detections and increase the cost on adversaries.
Let Us Find Out Whodunit
Whodunit is a tool that can be used to identify the most likely Advanced Persistent Threat group responsible for an attack. Let's find out how to use it!
Threat Hunting With Velociraptor III – Hunting Demo
Learn how to use Velociraptor’s threat hunting capabilities to identify malicious activity associated with real-world malware and threat actors in this demo.
Threat Hunting With Velociraptor II: Environment Setup
Discover how to create a virtualized threat hunting environment and use Velociraptor as a threat hunting tool to sniff out malicious reverse shells.
Threat Hunting With Velociraptor I – Introduction
Learn what threats are, what threat hunting is, and the basic security requirements needed to start a threat hunting program in this series introduction.