Detection Engineering in 2026: The Complete Lifecycle (Sigma, YARA, DaC & AI)
Detection engineering is more than writing SIEM rules. Learn the 6-phase lifecycle, the detection-as-code model, and why identity is the new battlefield.
Category Custom Tooling
MCP Servers for CTI in 2026: The Tools, the Risks, and What Comes Next
How MCP servers are transforming CTI workflows in 2026, which tools are worth your time, and how to secure the new attack surface they create.
Why Your CTI Team Can’t Keep Up (And How Data Engineering for CTI Fixes It)
Learn how data engineering for CTI can transform your threat intelligence team from reactive to proactive. A complete guide with actions.
FlowViz: Turn 40-Page Threat Reports into Visual Attack Flows in Under a Minute
Learn how FlowViz transforms threat reports into visual attack flows in seconds. Turn 40-page PDFs into MITRE ATT&CK-mapped diagrams with AI automation.
Stop Wasting Time! How Jupyter Notebooks Can Automate Your CTI Work
Unlock the power of the Jupyter Notebook. Our guide for CTI analysts covers setup, API integration, and practical examples to streamline your workflow.
Active Defense and Cyber Deception: Your Guide to Proactive Defense
Learn how to flip the script on attackers in this comprehensive guide on active defense and cyber deception for cyber security analysts.
CyberChef the Basics: A Quick Guide to The Most Versatile Cyber Tool
Discover powerful CyberChef magic in this CyberChef tutorial. Learn how to streamline data analysis and master the power of this cyber security tool.
Web Scraping Threat Intelligence Using Octoparse: Full Guide (2026)
Learn how to create your own custom web scraping tool to gather cyber threat intelligence using the the powerful, no-code platform Octoparse.
How to Create Your Own Malware Analysis Environment
Learn how to create your own malware analysis environment and automate its deployments in minutes using the power of infrastructure as code in this guide.
How to Setup Your Own Local Kubernetes Cluster: Local K8s with Terraform and Ansible
Learn how to create and build your own Kubernetes cluster using Terraform, Ansible, and the power of infrastructure as code (IaC). Run K8s Locally Today!
Netlas.io: A Powerful Suite of Tools for Threat Hunting
Discover netlas.io, a powerful suite of tools to enrich your threat hunts, add threat intelligence to your investigations, Discover netlas.io, a powerful suite of tools to enrich your threat hunts, add threat intelligence to your investigations, and map your attack surface.
Malware Configuration Parsers: An Essential Hunting Tool
Learn why malware configuration parsing is an essential skill for any threat hunter, plus how to use a malware configuration parsers to do this automatically.
Discover MITRE’s CTI Blueprints: A Revolutionary New Project
Learn about MITRE’s CTI Blueprints project. A revolutionary new CTI project that aims to help analysts deliver high-quality, standardized CTI reports.
Discover the Ultimate Cyber Security Notetaking App: Polarity
Discover the new cyber security notetaking app that integrates with your organization’s tools and is an effective copilot for all your investigations.
Python Threat Hunting Tools: Part 12 – MISP and CrowdStrike Falcon Integration
Make your threat hunting process more efficient by integrating MISP and CrowdStrike Falcon EDR so you can automate uploading your IOCs for detection.