Latest Articles
Detection Engineering: Practicing Detection-as-Code – Monitoring – Part 7
In this part, we are going to introduce automation to effectively monitor our deployed detections. By setting up automations at…
Reducing Microsoft Sentinel Costs Without Compromising Detection – Part 2: The Firewall Quest
Firewall network traffic logs are the largest driver of Microsoft Sentinel ingestion costs. Yet they remain a critical source of…
Reducing Microsoft Sentinel Costs Without Compromising Detection – Part 1: The Summary Rules Quest
This blog is the first in a series exploring how Summary Rules, together with Auxiliary or Data Lake storage, can…
Lunar Spider Expands their Web via FakeCaptcha
Key Findings Lunar Spider has expanded its initial access methods by compromising vulnerable websites, particularly in Europe, using Cross-Origin Resource…