⤷ Title: The Autonomous Blue Team: Build a Self-Healing SIEM with the AI Detection Engineering Lab
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:13:19 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AI security #Blue Team Automation #Claude Code #Detection Engineering #DevSecOps #Elastic Security #Fawkes C2 #MITRE ATT&CK #SIEM #Sigma Rules #Splunk #Threat Intel
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:13:19 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AI security #Blue Team Automation #Claude Code #Detection Engineering #DevSecOps #Elastic Security #Fawkes C2 #MITRE ATT&CK #SIEM #Sigma Rules #Splunk #Threat Intel
Penetration Testing Tools
The Autonomous Blue Team: Build a Self-Healing SIEM with the AI Detection Engineering Lab
Deploy an AI-powered detection pipeline using Claude Code. Automate the full SIEM lifecycle, from Sigma rule authoring to MITRE ATT&CK validation and tuning.
⤷ Title: Catching APT29 staging malware in 197k+ Sysmon events (and why your detection rule misses it)
════════════════════════
𐀪 Author: Manish Rawat
════════════════════════
ⴵ Time: Tue, 12 May 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #infosec #blue_team #cybersecurity #threat_hunting #detection_engineering
════════════════════════
𐀪 Author: Manish Rawat
════════════════════════
ⴵ Time: Tue, 12 May 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #infosec #blue_team #cybersecurity #threat_hunting #detection_engineering
Medium
Catching APT29 staging malware in 197k+ Sysmon events (and why your detection rule misses it)
Most SOC teams only watch process creation. I watch what processes load.
⤷ Title: Intro to Detection Engineering (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:33:13 GMT
════════════════════════
⌗ Tags: #blue_team #cybersecurity #tryhackme #hacking #detection_engineering
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:33:13 GMT
════════════════════════
⌗ Tags: #blue_team #cybersecurity #tryhackme #hacking #detection_engineering
Medium
Intro to Detection Engineering (THM) Tryhackme Walkthrough
Description : Learn what Detection Engineering is, how it works in a SOC, and the mindset required to build effective detections.
⤷ Title: Intro to Detection Engineering — THM WriteUp
════════════════════════
𐀪 Author: Sumit Shrestha
════════════════════════
ⴵ Time: Thu, 28 May 2026 15:35:52 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #detection_engineering #tryhackme #thm_writeup
════════════════════════
𐀪 Author: Sumit Shrestha
════════════════════════
ⴵ Time: Thu, 28 May 2026 15:35:52 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #detection_engineering #tryhackme #thm_writeup
Medium
Intro to Detection Engineering — THM WriteUp
Task 1: Introduction
⤷ Title: FortiClient EMS Was Turned Into a Malware Delivery System.
════════════════════════
𐀪 Author: Isaac Privett
════════════════════════
ⴵ Time: Fri, 29 May 2026 17:46:00 GMT
════════════════════════
⌗ Tags: #endpoint_security #detection_engineering #red_team #cybersecurity #penetration_testing
════════════════════════
𐀪 Author: Isaac Privett
════════════════════════
ⴵ Time: Fri, 29 May 2026 17:46:00 GMT
════════════════════════
⌗ Tags: #endpoint_security #detection_engineering #red_team #cybersecurity #penetration_testing
Medium
FortiClient EMS Was Turned Into a Malware Delivery System.
CVE-2026–35616 shows why endpoint management servers are not just admin consoles. They are fleet-wide execution platforms, and attackers…
⤷ Title: Intro to Detection Engineering (Refresh Ver.) Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 10:19:17 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #cybersecurity #detection_engineering #tryhackme_walkthrough
════════════════════════
𐀪 Author: Sle3pyHead
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 10:19:17 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #cybersecurity #detection_engineering #tryhackme_walkthrough
Medium
Intro to Detection Engineering (Refresh Ver.) Walkthrough Notes | TryHackMe
Learn detection engineering basics through practical concepts and security monitoring workflows.
⤷ Title: My First Steps in Purple Teaming with Atomic Red Team
════════════════════════
𐀪 Author: Boutros
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 10:49:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #mitre_attack #detection_engineering #purple_team #ethical_hacking
════════════════════════
𐀪 Author: Boutros
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 10:49:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #mitre_attack #detection_engineering #purple_team #ethical_hacking
Medium
My First Steps in Purple Teaming with Atomic Red Team
I just started a deep dive journey into Purple Teaming after finishing my four first years of engineering school. The first and main topic…
⤷ Title: How a Single KQL Query Stopped an Entire EvilTokens Phishing Campaign
════════════════════════
𐀪 Author: Matt Swann
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:29:58 GMT
════════════════════════
⌗ Tags: #detection_engineering #infosec #eviltokens #phishing #cybersecurity
════════════════════════
𐀪 Author: Matt Swann
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:29:58 GMT
════════════════════════
⌗ Tags: #detection_engineering #infosec #eviltokens #phishing #cybersecurity
Medium
How a Single KQL Query Stopped an Entire EvilTokens Phishing Campaign
Back in April of this year, an AI-powered phishing campaign known as EvilTokens took the spotlight in the infosec world. While the term…
⤷ Title: Detection Engineering With Snort | TryHackMe | detection challenge
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:18:52 GMT
════════════════════════
⌗ Tags: #snort #security_operation_center #tryhackme #cybersecurity #detection_engineering
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:18:52 GMT
════════════════════════
⌗ Tags: #snort #security_operation_center #tryhackme #cybersecurity #detection_engineering
Medium
Detection Engineering With Snort | TryHackMe | detection challenge
Build production-ready Snort detections: behaviour rules, tuning, suppression, and IOC lifecycle.
⤷ Title: Measuring Detection Engineering Effectiveness: A Practical Scorecard for Continuous Improvement
════════════════════════
𐀪 Author: Abhishek Kumar Sah
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 11:08:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #detection_engineering #infosec #threat_detection
════════════════════════
𐀪 Author: Abhishek Kumar Sah
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 11:08:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #detection_engineering #infosec #threat_detection
Medium
Measuring Detection Engineering Effectiveness: A Practical Scorecard for Continuous Improvement
Beyond False Positives — Part 2