How to Write Priority Intelligence Requirements for a Bank SOC
Tie threat intelligence to payment, fraud and resilience risk with clear PIRs, tag indicators by PIR in Sentinel and prove which feeds actually earn their keep.
13 Nov 202610 min read
All
Alert Triage
Detection Engineering
Incident Response
Threat Intelligence
Threat Hunting
SIEM and Tools
Career and Certs
Cheat Sheets
Threat News
4 posts found
How to Detect AiTM Session Cookie Theft in Entra ID Sign In Logs
Spot adversary in the middle phishing in Entra ID by tracking session IDs, OfficeHome sign ins and token risk events, then contain it before a payment fraud lands.
9 Nov 20269 min read
Linux SSH Log Cheat Sheet for Beginner SOC Analysts
Where Linux keeps SSH logs, what each common log line means and the simple grep and journalctl commands that tell you who logged in, from where and how.
9 Nov 20267 min read
How to Hunt for Kerberoasting After the 2026 RC4 Changes
RC4 is now off by default on domain controllers, so old Kerberoasting rules go quiet. Hunt AES ticket bursts, leftover RC4 accounts and decoy SPNs instead.
29 Oct 202610 min read