Detection Engineering in 2026: The Complete Lifecycle (Sigma, YARA, DaC & AI)
Detection engineering is more than writing SIEM rules. Learn the 6-phase lifecycle, the detection-as-code model, and why identity is the new battlefield.
Category Threat Hunting
Taming the Data Beast: A Threat Hunter’s Guide to Nushell
Unleash the power of your command line with Nushell, the modern shell for cyber security professionals. Analyze data more efficiently with Nushell today!
From Logs to Leads: A Practical Cyber Investigation of the Brutus Sherlock
Transform raw logs into leads in this practical cyber investigation guide. We solve the Hack the Box Brutus Sherlock and show you how to hunt down attackers.
Active Defense and Cyber Deception: Your Guide to Proactive Defense
Learn how to flip the script on attackers in this comprehensive guide on active defense and cyber deception for cyber security analysts.
C2 Hunting 101: How to Find C2 Servers with Shodan
Discover the power of C2 hunting and learn to hunt for C2 servers so you can stay ahead of the hackers. This guide teaches you C2 hunting using Shodan.
Collection Management Framework: How to Manage Your Data Sources
Learn how to effectively manage all your cyber threat intelligence data sources using a collection management framework. Increase CTI efficiency today!
Courses of Action Matrix: The Must-Know Actions for Cyber Security
Discover the must-know cyber security actions you can take to defend your business from the latest threats by unpacking the courses of actions (CoA) matrix.
Netlas.io: A Powerful Suite of Tools for Threat Hunting
Discover netlas.io, a powerful suite of tools to enrich your threat hunts, add threat intelligence to your investigations, Discover netlas.io, a powerful suite of tools to enrich your threat hunts, add threat intelligence to your investigations, and map your attack surface.
Malware Configuration Parsers: An Essential Hunting Tool
Learn why malware configuration parsing is an essential skill for any threat hunter, plus how to use a malware configuration parsers to do this automatically.
Discover the Ultimate Cyber Security Notetaking App: Polarity
Discover the new cyber security notetaking app that integrates with your organization’s tools and is an effective copilot for all your investigations.
Python Threat Hunting Tools: Part 12 – MISP and CrowdStrike Falcon Integration
Make your threat hunting process more efficient by integrating MISP and CrowdStrike Falcon EDR so you can automate uploading your IOCs for detection.
Python Threat Hunting Tools: Part 11 – A Jupyter Notebook for MISP
Learn how to create a Jupyter Notebook that you can use to query your MISP instance. This will drastically speed up your threat intelligence operations!
Python Threat Hunting Tools: Part 10 — The Power of Jupyter Notebooks
Discover what Jupyter Notebooks are and learn how to create your own to structure your threat hunting workflow and improve your efficiency.
Python Threat Hunting Tools: Part 9 — Creating Python Packages with Poetry
Learn to create your own Python packages using the Python module Poetry. This lets you easily share your threat hunting tools with the community.
Python Threat Hunting Tools: Part 8 — Parsing JSON
Discover how to extract valuable information from JSON to analyze it and turn it into threat intelligence or IOCs to hunt for in your environment.