Nuclei Templates as Detection Engineering, across pentest and threat-model assumptions

Why modern security fails silently — and how building better detections actually changes outcomes.

Detection Logic Bugs exist everywhere. Practitioners are starting to wake up. Vendor “100% Coverage” claims have a fallacy that leaves you…

This is my walkthrough for SigHunt, a premium room from TryHackMe, part of the Detection Engineering module and SOC Level 2 learning path.

Explore Kerlab: A high-performance Rust tool for mastering Kerberos. From TGT/TGS requests to brute-forcing, build better detection rules with hands-on labs.

Deploy an AI-powered detection pipeline using Claude Code. Automate the full SIEM lifecycle, from Sigma rule authoring to MITRE ATT&CK validation and tuning.

Most SOC teams only watch process creation. I watch what processes load.

Description : Learn what Detection Engineering is, how it works in a SOC, and the mindset required to build effective detections.

Task 1: Introduction

CVE-2026–35616 shows why endpoint management servers are not just admin consoles. They are fleet-wide execution platforms, and attackers…

Learn detection engineering basics through practical concepts and security monitoring workflows.

https://tryhackme.com/room/sighunt

I just started a deep dive journey into Purple Teaming after finishing my four first years of engineering school. The first and main topic…

Back in April of this year, an AI-powered phishing campaign known as EvilTokens took the spotlight in the infosec world. While the term…

Build production-ready Snort detections: behaviour rules, tuning, suppression, and IOC lifecycle.

Beyond False Positives — Part 2

We're all petrified about missing a critical event or misclassifying an alert, but when we're talking about incident response (IR), there are often hundreds if not thousands of alerts to parse through. It's easy to get caught up with one alert because it…