Шпаргалка для тех, кто занимается расследованием инцидентов 17 минут чтения и ты #Expert #DFIR https://t.co/YD7Ti7EE3C

I created a new Sigma detection rule repository. It is organized based on the @MITREattack framework. Additionally, every detection rule has a testing documentation. @likethecoins #DFIR #SOC #Splunk https://t.co/YXkP8uqkPb

RE&CT framework released! A knowledge base of actionable Incident Response techniques, based on @MITREattack philosophy. Mapping to ATT&CK / AMITT, export to @TheHive_Project templates, visualization in the Navigator, and more! atc-project.github.io/atc-react/…

Network Simulation now live on Hybrid-Analysis! Utilize this new option to route traffic through a simulated network to keep traffic from reaching attacker-controlled infrastructure. Happy hunting! More on our blog: https://t.co/RJC4ZAvoPR #malware #sandbox…

Inspired by the work of @b0rk, I made a log parsing cheat sheet which is very handy during incident response or threat hunting! You can print it for your office!📌 #infosec #DFIR If you like it, follow me for more stuff like this in 2021! 🤓

Contribute to d3sre/Other_Presentations development by creating an account on GitHub.

This paper is still "GOLD" for responding to compromised AD/Domain Controllers. How to handle KRBTGT resets to mitigate golden ticket attacks and the impact this can cause to legitimate sessions. #DFIR cert.europa.eu/static/WhitePa…

Analyst report for IR cases from 2020 is available github.com/klsecservices/… #DFIR #incidentresponse #threathunting