TID

Threat Intelligence & Defense

The scouts. What's coming.

Methodology: PDI674 articles

Certificate Transparency Logs

Explanation of Certificate Transparency framework, covering log servers, Signed Certificate Timestamps, monitoring capabilities, and detection of fraudulent certificates.

1,935 words10 min read

ConceptsTIDThreatAdvanced

Detection Engineering Principles

Applying software engineering discipline to threat detection content through version control, testing, ATT&CK mapping, and continuous improvement.

Threat Intelligence & Defense

Certificate Transparency Logs

Detection Engineering Principles

Defense in Depth

When Your Body Becomes the Attack Surface

APT28 (Fancy Bear / Forest Blizzard)

Email Security Architecture

Data Breach Investigation

Privilege Escalation Techniques

Ransomware Response Playbook

Security Orchestration Automation and Response (SOAR)

Lazarus Group (HIDDEN COBRA / Diamond Sleet)

Active Directory Security

Building a Security Program from Scratch

Security for Manufacturing

Cloud Identity Security

Credential Stuffing and Account Takeover

Salt Typhoon

Cyber Threat Landscape: 2025 and Beyond

Security for SaaS Companies

Living Off the Land Techniques

Predictive Defense Intelligence (PDI): See the Threat First

Security for Nonprofit Organizations

Cybersecurity for Small Business

Volt Typhoon

Business Email Compromise (BEC) Deep-Dive

Detection Engineering

AWS Security Fundamentals

State-Sponsored Cyber Threats: A Global Overview

Iran's Cyber Operations

Digital Forensics and Evidence Handling

Azure Security Fundamentals

Tabletop Exercises

Initial Access Techniques

Digital Forensics Evidence Handling

DNS Security

Google Cloud Security Fundamentals

MITRE ATT&CK Operationalization

Deception Technology and Honeypots

Wireshark Network Analysis

AI and Machine Learning Security Risks

LogRhythm SIEM Assessment

How to Become a SOC Analyst

DNS Security Configuration Runbook

Log Source Onboarding Runbook

Wireshark Packet Analysis Lab

DNS Security Lab

Log Forwarding and Parsing Lab

Cloud Security Strategy for Government

Security Awareness Training for Manufacturing

Kerberos Authentication and Attacks

Cloud Security Strategy for Manufacturing

Network Security Architecture for Government

AI-Powered Threat Detection Systems

Space Cybersecurity Challenges

NotPetya: The Most Destructive Cyberattack in History

Incident Communication and Notification

SIEM Platform Comparison Guide

EDR Platform Comparison Guide

Incident Detection and Behavioral Analytics

Log4Shell (CVE-2021-44228): Remote Code Execution in Every Java Application

Insider Threat Program

Mimecast Email Security Assessment

Network Detection and Response Fundamentals

Microsoft Sentinel Cloud SIEM

Cyber-Physical System Security

Lateral Movement Techniques

MOVEit Mass Exploitation Campaign: The Industrialization of Zero-Day Theft

Log Management and Retention

Critical Infrastructure Protection Trends

Vendor Risk Management for Government

SOAR Playbook Development Lab

Splunk SIEM Platform

MITRE ATT&CK Framework

Persistence Techniques

CrowdStrike Falcon EDR

Endpoint Detection and Response Lab

Arctic Wolf MDR Assessment

Email Security Gateway Comparison

Defense Evasion Techniques