Latest Articles
Detection Engineering: Practicing Detection-as-Code – Introduction – Part 1
In this first part we are going through the basic terminology and concepts of a Detection-as-Code approach in Detection Engineering.…
Detecting Teams Chat Phishing Attacks (Black Basta)
For quite a while now, there has been a new ongoing threat campaign where the adversaries first bomb a user's…
Validate your Windows Audit Policy Configuration with KQL
We provide a KQL query that will help you validate your defined Windows audit security policy configuration. Defining a Windows…