Articles by Tag #threathunting
Browse our collection of articles on various topics related to IT technologies. Dive in and explore something new!
The Threat Intelligence Ouroboros: Why the Ancient Symbol Fits Modern Security
TL;DR: Traditional security thinks linearly (detect → respond → done). Effective security operates in...
Introducing osquery_hunter — Lightweight Windows Triage Tool for DFIR & Threat Hunting
osquery_hunter helps security professionals quickly triage Windows systems using osquery. Ideal for DFIR and incident response when full EDR isn't available.
🚀 ElasticSecOpsCoPilot — Autonomous IOC Enrichment for Elastic Security
I just released ElasticSecOpsCoPilot, a Python-powered continuous enrichment engine. 🔥 What It...
Rise of the Digital Parasite: Why Ransomware Groups Stopped Encrypting Your Files in 2026
The 38% Drop Nobody Expected Ransomware encryption is dying. Not because defenders won —...
Stop Waiting for the Alarm: Why You Need to Go Hunting for Hackers Yourself
In the old days of cybersecurity, the system was simple: You installed a firewall and antivirus,...
Advanced Threat Hunting Techniques: Part 1
Originally published at Cyberpath Threat hunting is no longer a luxury reserved for large...
Advanced Threat Hunting Techniques: Part 2
Originally published at Cyberpath In Part 1 of this series, we explored anomaly detection and...
The Dracula Trilogy: Encoding AI-Assisted Attack Lifecycles as Vampire Mythology
How Nosferatu, Carmilla, and Vlad map to Infiltration, Masquerade, and Persistence in modern cyber...
What is Detection as Code?
What is Detection as Code? Detection as Code (DaC) is a modern cybersecurity practice...
A Technical Deep Dive: Investigating Exchange Exploits and Lateral Movement in Splunk
Introduction I recently conducted a thorough study of a sophisticated assault campaign...
The Rise of Offensive AI: How Adversaries are Weaponizing Machine Learning
For decades, the archetype of the cyber adversary has been the shadowy hacker in a dark room, a lone...
#DAY 4: The Field Agent
Deploying the Universal Forwarder & Establishing a Secure Connection Intoduction Day 4...
CVE-2026-22769: Dell RecoverPoint Zero-Day Exploited by China Since 2024 — CVSS 10.0
A Hardcoded Password. Root Access. Two Years Undetected. Dell shipped a backup product...
UNC2814 GridTide: How China-Linked Hackers Used Google Sheets as C2 Across 42 Countries
A Spreadsheet Was the Weapon Google just disrupted one of the most sophisticated...
Dohdoor Malware: New Backdoor Targets U.S. Education & Healthcare (UAT-10027)
Executive Summary Threat Actor: UAT-10027 (low-confidence North Korea nexus, overlaps...
What is Memory Forensics?
What is Memory Forensics? Memory forensics, or RAM forensics, involves analyzing a...
Advanced Persistent Threats (APT): Threat Hunting Methodologies
Advanced Persistent Threats (APT): Threat Hunting Methodologies Executive...
Fix It Before They Break It: The True Role of Vulnerability Management
Before we start let's understand a few keywords Vulnerability: Vulnerability is always defined by...
Threat Hunting With ZoomEye 2025
In the ever-evolving landscape of cybersecurity, threat hunting has become a cornerstone of proactive...
Network Security Monitoring - Advanced Detection and Response
# Network Security Monitoring: Advanced Detection and Response ## Introduction Network Security Monitoring (NSM) provides comprehensive visibility i...
Level Up Your Blue Team Skills with SOCLabs 🚀
Cybersecurity is not just about building firewalls or patching systems. For blue team...
Can Hybrid SOC Services stop advanced threats?
Hybrid SOC services combine the capabilities of in-house security teams with the expertise and...
Hunting for malicious OpenClaw AI in the modern enterprise
This article explores the security risks associated with OpenClaw, an open-source framework for...
Rethinking the ‘Human Layer’ in Security for 2026: Employee Training vs. Security Team Capacity
Delve into the limitations of relying on employees as the last line of defense and the critical role of security teams in mitigating threats.
Shadow Agents: How SentinelOne Secures the AI Tools That Act Like Users
The rapid integration of Large Language Models (LLMs) and agentic AI assistants like OpenClaw (also...
Speeding APT Attack Confirmation with Attack Discovery, Workflows, and Agent Builder
This article explores the defense against the Chrysalis backdoor, a sophisticated malware utilized by...