MITRE's New Detection Model Explained, in depth.

Let there be logs, and there was telemetry

A Reaction Says More Than Thousand Replies

Not all installations are equal

MITRE's New Detection Model Explained.

Finding your inner join in a leftouter world

Order in chaos is what separates a good analyst from a great one.

Bin it. Chart it. Peek at the peaks.

How to Validate Your Detection Logic Without Summoning a Real Threat Actor

Force dark theme on launch, kill the evidence, walk away