⤷ Title: FortiClient EMS Was Turned Into a Malware Delivery System.
════════════════════════
𐀪 Author: Isaac Privett
════════════════════════
ⴵ Time: Fri, 29 May 2026 17:46:00 GMT
════════════════════════
⌗ Tags: #endpoint_security #detection_engineering #red_team #cybersecurity #penetration_testing
════════════════════════
𐀪 Author: Isaac Privett
════════════════════════
ⴵ Time: Fri, 29 May 2026 17:46:00 GMT
════════════════════════
⌗ Tags: #endpoint_security #detection_engineering #red_team #cybersecurity #penetration_testing
Medium
FortiClient EMS Was Turned Into a Malware Delivery System.
CVE-2026–35616 shows why endpoint management servers are not just admin consoles. They are fleet-wide execution platforms, and attackers…
⤷ Title: Intro to Detection Engineering (Refresh Ver.) Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 10:19:17 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #cybersecurity #detection_engineering #tryhackme_walkthrough
════════════════════════
𐀪 Author: Sle3pyHead
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 10:19:17 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #cybersecurity #detection_engineering #tryhackme_walkthrough
Medium
Intro to Detection Engineering (Refresh Ver.) Walkthrough Notes | TryHackMe
Learn detection engineering basics through practical concepts and security monitoring workflows.
⤷ Title: SigHunt — From IOCs to Sigma Rules: A Detection Engineering Walkthrough of TryHackMe — SigHunt
════════════════════════
𐀪 Author: Pravat Dash
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 20:26:18 GMT
════════════════════════
⌗ Tags: #detection #information_security #cybersecurity #tryhackme #security
════════════════════════
𐀪 Author: Pravat Dash
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 20:26:18 GMT
════════════════════════
⌗ Tags: #detection #information_security #cybersecurity #tryhackme #security
Medium
SigHunt — From IOCs to Sigma Rules: A Detection Engineering Walkthrough of TryHackMe — SigHunt
https://tryhackme.com/room/sighunt
⤷ Title: My First Steps in Purple Teaming with Atomic Red Team
════════════════════════
𐀪 Author: Boutros
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 10:49:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #mitre_attack #detection_engineering #purple_team #ethical_hacking
════════════════════════
𐀪 Author: Boutros
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 10:49:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #mitre_attack #detection_engineering #purple_team #ethical_hacking
Medium
My First Steps in Purple Teaming with Atomic Red Team
I just started a deep dive journey into Purple Teaming after finishing my four first years of engineering school. The first and main topic…
⤷ Title: How a Single KQL Query Stopped an Entire EvilTokens Phishing Campaign
════════════════════════
𐀪 Author: Matt Swann
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:29:58 GMT
════════════════════════
⌗ Tags: #detection_engineering #infosec #eviltokens #phishing #cybersecurity
════════════════════════
𐀪 Author: Matt Swann
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:29:58 GMT
════════════════════════
⌗ Tags: #detection_engineering #infosec #eviltokens #phishing #cybersecurity
Medium
How a Single KQL Query Stopped an Entire EvilTokens Phishing Campaign
Back in April of this year, an AI-powered phishing campaign known as EvilTokens took the spotlight in the infosec world. While the term…
⤷ Title: Detection Engineering With Snort | TryHackMe | detection challenge
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:18:52 GMT
════════════════════════
⌗ Tags: #snort #security_operation_center #tryhackme #cybersecurity #detection_engineering
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:18:52 GMT
════════════════════════
⌗ Tags: #snort #security_operation_center #tryhackme #cybersecurity #detection_engineering
Medium
Detection Engineering With Snort | TryHackMe | detection challenge
Build production-ready Snort detections: behaviour rules, tuning, suppression, and IOC lifecycle.
⤷ Title: Measuring Detection Engineering Effectiveness: A Practical Scorecard for Continuous Improvement
════════════════════════
𐀪 Author: Abhishek Kumar Sah
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 11:08:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #detection_engineering #infosec #threat_detection
════════════════════════
𐀪 Author: Abhishek Kumar Sah
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 11:08:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #detection_engineering #infosec #threat_detection
Medium
Measuring Detection Engineering Effectiveness: A Practical Scorecard for Continuous Improvement
Beyond False Positives — Part 2
⤷ Title: Finding the “Goldilocks” Zone: A Practical Approach to Alert Triage
════════════════════════
𐀪 Author: BHIS
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 14:00:00 +0000
════════════════════════
⌗ Tags: #Active SOC #Blue Team #DFIR #Hayden Covington #Incident Response #Informational #Alert Traige #Detection Logic #Infosec for Beginners #InfoSec Survival Guide #Orange Book #SIEM
════════════════════════
𐀪 Author: BHIS
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 14:00:00 +0000
════════════════════════
⌗ Tags: #Active SOC #Blue Team #DFIR #Hayden Covington #Incident Response #Informational #Alert Traige #Detection Logic #Infosec for Beginners #InfoSec Survival Guide #Orange Book #SIEM
Black Hills Information Security, Inc.
Finding the "Goldilocks" Zone: A Practical Approach to Alert Triage - Black Hills Information Security, Inc.
We're all petrified about missing a critical event or misclassifying an alert, but when we're talking about incident response (IR), there are often hundreds if not thousands of alerts to parse through. It's easy to get caught up with one alert because it…
⤷ Title: AI & Automation in Detection Engineering — review & fix an AI-generated detection rule
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 20:21:01 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #security_operation_center #sigma_rules #detection_as_code
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 20:21:01 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #security_operation_center #sigma_rules #detection_as_code
Medium
AI & Automation in Detection Engineering — review & fix an AI-generated detection rule
Learn to automate detection rules development and how AI can boost this process effectively.
⤷ Title: AI & Automation in Detection Engineering | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 12:03:20 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #ai #detection_engineering
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 12:03:20 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #ai #detection_engineering
Medium
AI & Automation in Detection Engineering | TryHackMe
Learn to automate detection rules development and how AI can boost this process effectively.