#Detectionengineering - Twitter Hashtag

about 15 hours ago

Know the Data. Know the Threat. Craft the Detection. 🎯 Our free #DetectionEngineering poster covers everything from the detection lifecycle and #SIEM architecture to KQL, Sigma rules, log collection, and more. Grab your copy 👇 https://t.co/1gUNfaxJXG #Cybersecurity #BlueTeam

SANSDefense's tweet photo. Know the Data. Know the Threat. Craft the Detection. 🎯

Our free #DetectionEngineering poster covers everything from the detection lifecycle and #SIEM architecture to KQL, Sigma rules, log collection, and more.

Grab your copy 👇
https://t.co/1gUNfaxJXG
#Cybersecurity #BlueTeam https://t.co/GrLJ8IhmRd

0

186

SCYTHE @scythe_io

1 day ago

Why bring your own tools when the environment hands them to you? Join Trey Bilbrey (@TCraf7) and Tyler Casey for a 3-hour hands-on LOLBAS workshop, June 17th at 1:00 pm. Full ATT&CK chain, no malware dropped. Register here: https://t.co/C2qlDuJO3G #DetectionEngineering #CybersecurityEvents #LOLBAS

scythe_io's tweet photo. Why bring your own tools when the environment hands them to you? Join Trey Bilbrey (@TCraf7) and Tyler Casey for a 3-hour hands-on LOLBAS workshop, June 17th at 1:00 pm. Full ATT&CK chain, no malware dropped.

Register here: https://t.co/C2qlDuJO3G

#DetectionEngineering
#CybersecurityEvents
#LOLBAS

0

3

0

82

William | Cybersecurity & SOC Analyst @WilliamInCyber

4 days ago

If you were building a detection rule which would you prioritise first? 🔴 Accuracy (fewer false positives) 🔴 Broader coverage (catch more, tune later) Drop it below 👇 GitHub link 🔗: https://t.co/LjF1M7ouvs #Splunk #DetectionEngineering #SOC #BlueTeam #SIEM #CyberSecurity

0

2

37

Felippe Motta 🇧🇷🇬🇧

@lippebsd

4 days ago

Pathfinding Labs is a reminder that detection engineering gets better when you can actually reproduce attacker paths in a sandbox. If you’re not testing IAM escalation end-to-end, you’re guessing. #AWS #IAM #PurpleTeam #DetectionEngineering #CloudSec

0

5

MOHIT DABAS @DabasMonty

5 days ago

https://t.co/bhcaZgzS34 #CyberSecurity #SOC #DetectionEngineering #ThreatHunting #SecurityEngineering #DFIR #IncidentResponse #Python #MachineLearning #AnomalyDetection #BlueTeam #SecurityResearch

0

17

ITNEXT @ITNEXT_io

5 days ago

Pattern Detection and Correlation in JSON Logs - by @MosiMoradian #DetectionEngineering #SoftwareDevelopment #Sigma #DetectionAndResponse #RustLang #SigmaBackend https://t.co/3zzW74IhwU

0

1

85

BriPwn

@BriPwn

5 days ago

🟣 KSLKatz just got a makeover. MorphKatz. Mutated binary. Defender has no idea. LSASS doesn't stand a chance. But the telemetry doesn't lie. 👀 Watch the full red vs. blue breakdown 🎥 https://t.co/XxdpcCxG5z #PurpleTeam #RedTeam #BlueTeam #DetectionEngineering #MITREATTACK #WeeklyPurpleTeam

0

2

0

4

135

Anvilogic

@AnvilogicSecOps

7 days ago

Measuring AI by token spend is the wrong metric for the SOC. The real question: how many investigations closed before escalation? Hours returned to the team? Karthik Kannan in Forbes → https://t.co/qYxZCT8JVe #AISOC #DetectionEngineering #CyberSecurity #AgenticAI

0

18

Harry @InfoSecHarry

10 days ago

⚠️ @Mandiant /GTIG’s April UNC6692 write-up covers the wider attack chain, SNOW malware ecosystem, public IOCs, YARA logic, and MITRE mapping: https://t.co/H2UDRS0wDf #ThreatHunting #DetectionEngineering #DFIR #SOC #UNC6692 #SNOWBELT #MicrosoftEdge

0

2

0

113

David Hernández | Cybersecurity @descambiado

11 days ago

Most Entra ID detection rules look at the right technique and the wrong field. AiTM: signal is not non-interactive after interactive. It is ASN mismatch between both within 10 min. Completely different rule. 12 open source detections. #MicrosoftSentinel #DetectionEngineering

1

0

16

William | Cybersecurity & SOC Analyst @WilliamInCyber

12 days ago

5/ The repo is public 🔗 https://t.co/mPwcDaNpb2 Full walkthrough, all 5 Splunk queries runnable, Python scripts work on any log file. 9 days left in my 30-day program. Building publicly. #cybersecurity #SOC #DetectionEngineering

0

2

0

3

203

Emanuela Zaccone @Zatomas

13 days ago

If your Azure detections rely on extension resource names, this is worth your time. @Sysdig TRT found a gap in VM password reset detection that Microsoft says isn't a vulnerability. Full research: https://t.co/WdMbXPtr3g #CloudSecurity #Azure #DetectionEngineering

Zatomas's tweet photo. If your Azure detections rely on extension resource names, this is worth your time.

@Sysdig TRT found a gap in VM password reset detection that Microsoft says isn't a vulnerability.

Full research: https://t.co/WdMbXPtr3g

#CloudSecurity #Azure #DetectionEngineering https://t.co/VikTP5CiiJ

0

1

0

67

cylerian

@cylerian

13 days ago

Our AI agent built a full threat detection ruleset in a single session: 10 MITRE ATT&CK techniques, 5 behavioral aggregates, and a multi-stage kill chain correlator. No human in the loop. https://t.co/cXacxlaoSB #detectionengineering #ai #threathunting

cylerian's tweet photo. Our AI agent built a full threat detection ruleset in a single session: 10 MITRE ATT&CK techniques, 5 behavioral aggregates, and a multi-stage kill chain correlator. No human in the loop.

https://t.co/cXacxlaoSB

#detectionengineering #ai #threathunting https://t.co/minVaxmgHj

0

2

1

0

157

Mehmet Ergene

@Cyb3rMonk

14 days ago

📅 Releasing my course next week! I'm solving majority of the decade-old problems in SOC, without AI. Fundamental data analysis methods is all you need. #ThreatHunting #DetectionEngineering

Cyb3rMonk's tweet photo. 📅 Releasing my course next week!

I'm solving majority of the decade-old problems in SOC, without AI.

Fundamental data analysis methods is all you need.

#ThreatHunting #DetectionEngineering https://t.co/5fvpamV4eI

0

27

4

8

2K

Release2

@Release2I

14 days ago

Analyst1 top performing Cyber Platform https://t.co/nroALZJztf @Analyst1 #Analyst1 #ThreatIntelligence #CyberThreatIntel #CTI #ThreatHunting #SOC #SOCOperations #DetectionEngineering #IncidentResponse #CyberSecurity #InfoSec #OSINT #MalwareAnalysis #Ransomware #APT #MITREATTACK #SIEM #Splunk #SecurityOperations

0

1

0

30

arielmsanchez @arielmsanchez1

15 days ago

I'm happy to announce Pentest RuleGen, a local-first tool that helps transform pentest reports into reusable detection engineering artifacts. GitHub: https://t.co/XXqXExTyAN #SecurityAutomation #Pentesting #Semgrep #Nuclei #DetectionEngineering #AppSec #OpenSource

0

2

0

1

94