Detection Lab

Weekly engineering deep dives on intrusion analysis, log hunting telemetry, SIEM query architecture, and defensive validation.

[08 NOV 2026] [detection] [T1059]

MITRE ATT&CK for Beginners, With a Ransomware Example — An introduction to the MITRE ATT&CK matrix for defensive engineers, breaking down tactical phases, adversary techniques, and detection telemetry.

1 MIN

An introduction to the MITRE ATT&CK matrix for defensive engineers, breaking down tactical phases, adversary techniques, and detection telemetry.

[08 NOV 2026] [detection] [T1566]

Phishing Triage Like a SOC Analyst — Step by Step — A hands-on detection engineering guide detailing how SOC analysts analyze malicious email headers, inspect authentication records, and isolate IOCs.

2 MIN

A hands-on detection engineering guide detailing how SOC analysts analyze malicious email headers, inspect authentication records, and isolate IOCs.