The first blog

 Hi,

I do alot of research into threat hunting, detection engineering and security architecture. This place will be to store my loot (things I find interesting). Feel free to do whatever you like!

I will try to keep the format of this blog as formal as possible so if you want random insane ramblings about my loot you can stare at my twitter.

-

Featured

Goblin Diary #2 - AI Tools for Analysts 🐯

Dont Use AI  Analyst work is built on the human capacity for creativity, memory recall and information gathering and using so called 'AI...

Popular

  • Brilliance in the Basics
    Introduction Tired of watching you and your friends get compromised, do exactly what's in this blog and start beating adversaries. Avoid...
  • Investigate
      Introduction This document details how an analyst should conduct investigations and triage in the normal duties of their job. It will des...
  • Endpoint on Adrenaline : One
    Introduction   This blog series will capture how to maximise the protection of an endpoint using the various technologies in the Defender su...
  • Endpoint on Adrenaline 3
    Introduction Now that I have covered the advanced features obtained from Defender for Cloud and the complexities of Defender for Endpoint wi...
  • Endpoint on Adrenaline Two
    Introduction Continuing on from my last post that captured using Defender for Cloud to gain powerful additional features on top of defender...
  • Investigate Three
     Analysis  In this post, I explain analysis and the associated techniques to mean at the lowest possible level a human’s ability to consume ...
  • Investigate Two
    Introductions How you as an analyst handle true positives is life and death in the eyes of potential victims. Traditionally the industry ele...
  • Writing detections when stuck with EDR
    Introduction Making the leap to purchasing and maintaining an EDR solution can be huge for organisations so huge in fact that they never rea...
  • Proxmox and Adversaries
    Introduction ❗take the time to read the bottom of this page. Proxmox is a virtualisation technology stack that is quickly becoming the...
  • Standardized Note Taking Format For Analysts
      Introduction This post outlines a format for note-taking designed to aid analysts and ensure the knowledge they acquire over time is kep...