DFIR and Threat Hunting findingbad.blogspot.com

Hunting for Fakes

findingbad.blogspot.com·221w·findingbad.blogspot.com

Measuring User Behavior

findingbad.blogspot.com·237w·findingbad.blogspot.com

More Behavioral Hunting and Insider Data Theft

findingbad.blogspot.com·272w·findingbad.blogspot.com

Insider Threat Hunting

findingbad.blogspot.com·306w·findingbad.blogspot.com

Dynamic Correlation, ML and Hunting

findingbad.blogspot.com·308w·findingbad.blogspot.com

It's all in the numbers

findingbad.blogspot.com·313w·findingbad.blogspot.com

Hunting for Beacons Part 2

findingbad.blogspot.com·314w·findingbad.blogspot.com

Hunting for Beacons

findingbad.blogspot.com·315w·findingbad.blogspot.com

This Day 25 Years Ago

findingbad.blogspot.com·398w·findingbad.blogspot.com

Thoughts After the Sans 2018 ThreatHunting Summit

findingbad.blogspot.com·401w·findingbad.blogspot.com

Methods of Detection

findingbad.blogspot.com·411w·findingbad.blogspot.com

C2 Hunting

findingbad.blogspot.com·425w·findingbad.blogspot.com

What are your tools detecting

findingbad.blogspot.com·435w·findingbad.blogspot.com

My 2017

findingbad.blogspot.com·437w·findingbad.blogspot.com

Hunting with ELK

findingbad.blogspot.com·437w·findingbad.blogspot.com

A Few of My Favorite Things - Continued

findingbad.blogspot.com·440w·findingbad.blogspot.com

A Few Of My Favorite Things

findingbad.blogspot.com·442w·findingbad.blogspot.com

Billions and Billions of Logs; Oh My

findingbad.blogspot.com·472w·findingbad.blogspot.com

Hunting for Chains

findingbad.blogspot.com·481w·findingbad.blogspot.com

Patterns of Behavior

findingbad.blogspot.com·483w·findingbad.blogspot.com

Log in to enable infinite scrolling