Zeds·Oct 12Does Your Detection Work? What a Ransomware Simulation Reveals About SOC EffectivenessFrom vulnerability exploitation to file encryption, validating detection requires following the behaviors that allow an adversary to…
InITNEXTbyMostafa Moradian·Apr 29Building a Detection Layer on PostgreSQL with Sigma RulesHow RSigma turns 3,800+ community detection rules into SQL queries for TimescaleDBA response icon1A response icon1
InITNEXTbyMostafa Moradian·Apr 24Streaming Logs to RSigma for Real-Time DetectionTurning Four Routine Okta Detections into One Critical Alert
InITNEXTbyMostafa Moradian·Feb 24Pattern Detection and Correlation in JSON LogsIntroducing RSigma: a Rust toolkit for evaluating Sigma detection rules against JSON events without a SIEM
Steve Cooper·Feb 18From Linting to Purple Teaming: A Detection Testing ToolkitCan you explain how you test detections?
Hiroshi Ohtani·Feb 4Reachability-Oriented Defense Model (RODM)A Practical Framework for Detecting Lateral Movement via Observational Asymmetry
InThe Visibility Layer by GraylogbyGraylog·Jan 14SOC vs MDR Costs: Analyst Time and Infrastructure DominateJeff Darrington, Technical Marketing Director, Graylog
InAnton on SecuritybyAnton Chuvakin·Jan 9Beyond “Is Your SOC AI Ready?” Plan the Journey!You read the “AI-ready SOC pillars” blog, but you still see a lot of this:A response icon2A response icon2
InMeetCyberbyNetWitness·Dec 27, 20255 NDR Challenges You Need to Solve Before 2026Traditional NDR solutions were working at the time where attack patterns and threat actors are not as diverse as they are today. Constant…
Hanif K A·Oct 30, 2025Wazuh × Tines SOAR Integration: Lab Setup Phase 1integrating Wazuh (SIEM) with Tines (SOAR) to deliver human-in-the-loop automation threat detection and response.A response icon1A response icon1
