Cross-Org Visibility for LimaCharlie
Discover how Recon InfoSec enhances security operations with LimaCharlie, offering cross-org visibility through a Prometheus exporter for unified insights.
Ben Webb
Cybersecurity Guides
Guides for defensive cyber practitioners.
Detecting Fake CAPTCHA Campaigns: ClickFix, ClearFake, and Etherhide
Discover how cybercriminals trick users with fake CAPTCHA pages to deploy malware and learn effective detection techniques to safeguard your systems against these evolving threats.
Luke Rusten
SigmaHQ Essentials - Building Robust Detection Capabilities - Part 2
The blog post provides a detailed guide on creating SigmaHQ detections. It explains the process of selecting relevant log data and translating it into a Sigma detection rule, emphasizing the importance of customized detections for better security monitoring.
Watson Brown
Effective Threat Hunting
Learn effective threat hunting strategies from Luke Rusten's insights on prioritization, continuous improvement, and practical techniques to enhance your organization's security operations.
Luke Rusten
SigmaHQ Essentials - Building Robust Detection Capabilities
This series of blog posts should cover the basics to get you started. What is sigmaHQ? How are detections written? How can detection engineering be integrated into your tools/soc/security team? And a few other fancy uses you can get out of this free and amazing repository of detections.
Watson Brown
Advanced Email Protection: Detection Techniques in Action
Take a deeper dive into Advanced Email Protection from Recon InfoSec.
Macie Thompson
Recon's Guide to Testing for the Log4J Vulnerability using Canarytokens
Guide to using CanaryTokens.org to generate a token and how to use that token to determine if an application is vulnerable to Log4j.
Andrew Cook
Recon's SOAR Playbook To Detect Log4J Exploitation
The recent Log4j vulnerability (CVE-2021-44228) is unprecedented in its global scope and impact.
Andrew Cook