The AI takeover has begun. Let’s take back control and learn ten ways to use ChatGPT to aid your threat hunting. The power of AI allows you to augment your threat hunting in ways that were unobtainable before. As a threat hunter, I have needed to jump in and find…

If you work in cyber security it’s likely you’ve come across the terms threat intelligence and threat hunting before, but what is the difference? These are common terms that seem to be used interchangeably in the world of cyber, however, they are not the same and it is important to…

Hey friend, welcome back! In my last blog post on using threat intelligence articles for hunting we looked at extracting IOCs and TTPs from these articles and using them to perform IOC-based and TTP-based threat hunts. Hunting IOCs was simple, however, for TTPs, we had to correlate MITRE ATT&CK techniques…

Hey friend, welcome back! In a previous article, I discussed the MITRE ATT&CK framework and how it was the “holy bible” for threat intelligence analysts. This framework covers all the ways adversaries can perform a cyber attack in a step-by-step fashion and it provides a common language for defenders to…

Hey friend, welcome back! Today we will be delving into the MITRE ATT&CK framework. This framework is the holy bible of cyber threat intelligence. It provides a common language for describing and categorizing adversarial tactics, techniques, and procedures (TTPs) based on real-world observations. …

Hey friend, welcome back! Today we will be taking a look at “The Pyramid of Pain” and how you can make bad guys cry. The pyramid is an illustration that shows how some IOCs (Indicators of Compromise) are more difficult for an adversary to change than others. Its creator, David…

Welcome to the third installment in this threat hunting series! If you’ve been following along so far you should have a virtualized environment all set up and ready to hunt using the DFIR tool Velociraptor. However, if you are just joining please see my previous article Threat Hunting II: Environment…

Welcome back to part II of this series on threat hunting! (apologies for the delay). In the first part of this series I discussed what threat hunting was, the level of maturity an organization needs to reach in order to effectively develop a threat hunting capability, and why threat hunting…

How do you think computers are secured nowadays? You might think with firewalls or anti-virus solutions like Windows Defender. If you want to get fancy perhaps a VPN like [insert name of VPN which keeps coming up every time I want to watch a YouTube video] or something cool like…

Home labs are the bread and butter for any IT professional who wants to take their technical skills to the next level. Whether it is practicing setting up an Active Directory environment or detonating malware to discover hidden functionality, home labs are the vehicle to drive your journey. Home labs…