Every Pentest Makes us Better
Recon InfoSec treats every pentest as a real attack, using them to enhance detection logic, refine procedures, and strengthen overall SOC operations.
Andrew Cook
Tag
Detection Engineering
Articles tagged Detection Engineering.
Detecting Fake CAPTCHA Campaigns: ClickFix, ClearFake, and Etherhide
Discover how cybercriminals trick users with fake CAPTCHA pages to deploy malware and learn effective detection techniques to safeguard your systems against these evolving threats.
Luke Rusten
SigmaHQ Essentials - Building Robust Detection Capabilities - Part 2
The blog post provides a detailed guide on creating SigmaHQ detections. It explains the process of selecting relevant log data and translating it into a Sigma detection rule, emphasizing the importance of customized detections for better security monitoring.
Watson Brown
SigmaHQ Essentials - Building Robust Detection Capabilities
This series of blog posts should cover the basics to get you started. What is sigmaHQ? How are detections written? How can detection engineering be integrated into your tools/soc/security team? And a few other fancy uses you can get out of this free and amazing repository of detections.
Watson Brown
Advanced Email Protection: Detection Techniques in Action
Take a deeper dive into Advanced Email Protection from Recon InfoSec.
Macie Thompson
Recon's SOAR Playbook To Detect Log4J Exploitation
The recent Log4j vulnerability (CVE-2021-44228) is unprecedented in its global scope and impact.
Andrew Cook