Research

Incident teardowns, detection engineering, reverse engineering and network forensics. Filtered to snort.

Collection

Format

Rule PackPro+

Q3 detection rule pack: persistence and execution

Sigma, YARA and network rules built from the quarter's CISA advisories, with the advisory cited on every rule and the indicator table they came from attached as CSV.

25 Aug 20263 min readT1547.001T1059.001T1218.011sigma yara snort detection-engineering

Full write-up available to members subscribers. See what is included.