FalconForce
@falconforce.nl
Building a resilient digital society through highly specialised digital security consulting.
We’re happy to join #WWHF once more. @olafhartong.nl has prepared a talk on some great #EDR (follow up) research he has been working on: “I’m In Your Logs Again; Spoofing and Causing Chaos”. Join him in-person or online on February 13!
Registration: wildwesthackinfest.com
Registration: wildwesthackinfest.com
January 19, 2026 at 2:45 PM
We’re happy to join #WWHF once more. @olafhartong.nl has prepared a talk on some great #EDR (follow up) research he has been working on: “I’m In Your Logs Again; Spoofing and Causing Chaos”. Join him in-person or online on February 13!
Registration: wildwesthackinfest.com
Registration: wildwesthackinfest.com
The Insomni'hack (@1ns0mn1h4ck.bsky.social) cyber security conference takes place in Switzerland from March 16-20. We will once more facilitate our 3-day workshop Advanced Detection Engineering in the Enterprise.
Visit insomnihack.ch/workshops/ad... for more details and to secure your ticket.
Visit insomnihack.ch/workshops/ad... for more details and to secure your ticket.
January 12, 2026 at 4:47 PM
The Insomni'hack (@1ns0mn1h4ck.bsky.social) cyber security conference takes place in Switzerland from March 16-20. We will once more facilitate our 3-day workshop Advanced Detection Engineering in the Enterprise.
Visit insomnihack.ch/workshops/ad... for more details and to secure your ticket.
Visit insomnihack.ch/workshops/ad... for more details and to secure your ticket.
FalconForce is proud sponsor of the Yellowhat cyber security conference on January 13, 2026.
@olafhartong.nl is co-presenting the talk “Inside MDE Telemetry: The Why, The How, and What’s Next”.
Visit yellowhat.live for event registration. Live Stream is available.
@olafhartong.nl is co-presenting the talk “Inside MDE Telemetry: The Why, The How, and What’s Next”.
Visit yellowhat.live for event registration. Live Stream is available.
January 9, 2026 at 3:14 PM
FalconForce is proud sponsor of the Yellowhat cyber security conference on January 13, 2026.
@olafhartong.nl is co-presenting the talk “Inside MDE Telemetry: The Why, The How, and What’s Next”.
Visit yellowhat.live for event registration. Live Stream is available.
@olafhartong.nl is co-presenting the talk “Inside MDE Telemetry: The Why, The How, and What’s Next”.
Visit yellowhat.live for event registration. Live Stream is available.
Happy New Year! 2026 has started and we are eager to share with you our ambitions for this brand-new year.
Read the full post: www.linkedin.com/feed/update/...
Read the full post: www.linkedin.com/feed/update/...
Happy New Year! 2026 has started and we are eager to share with you our ambitions for this brand-new year. 2026 is going to be very interesting and we are super excited!
Sentry Respond
We will… | Fal...
Happy New Year! 2026 has started and we are eager to share with you our ambitions for this brand-new year. 2026 is going to be very interesting and we are super excited!
Sentry Respond
We will launch...
www.linkedin.com
January 5, 2026 at 2:38 PM
Happy New Year! 2026 has started and we are eager to share with you our ambitions for this brand-new year.
Read the full post: www.linkedin.com/feed/update/...
Read the full post: www.linkedin.com/feed/update/...
FalconForce is proud to be part of #SpecterOps’ SO-CON conference in April 2026. Marat will present a talk on abusing misconfigurations in #CyberArk to get high privileges: “4 Get requests = 3 Domain admins: CyberArk magic you didn’t know about”.
Tickets and registration: specterops.io/so-con/
Tickets and registration: specterops.io/so-con/
December 23, 2025 at 1:27 PM
FalconForce is proud to be part of #SpecterOps’ SO-CON conference in April 2026. Marat will present a talk on abusing misconfigurations in #CyberArk to get high privileges: “4 Get requests = 3 Domain admins: CyberArk magic you didn’t know about”.
Tickets and registration: specterops.io/so-con/
Tickets and registration: specterops.io/so-con/
FalconForce’s Agapios brings you an early Christmas present🎁: the second blog in #detectionengineering maintenance. Learn all about how data science can boost your detection maintenance … and keep you from herding sheep. Enjoy the read and happy holidays🎄
falconforce.nl/how-data-sci...
falconforce.nl/how-data-sci...
December 12, 2025 at 11:16 AM
FalconForce’s Agapios brings you an early Christmas present🎁: the second blog in #detectionengineering maintenance. Learn all about how data science can boost your detection maintenance … and keep you from herding sheep. Enjoy the read and happy holidays🎄
falconforce.nl/how-data-sci...
falconforce.nl/how-data-sci...
The sold-out #BSidesAmsterdam event, where 200+ information security enthusiasts joined, was a great day full of inspiring talks.
It brought brilliant minds together and created an atmosphere where new ideas could flow and people went home inspired. See you next year!
It brought brilliant minds together and created an atmosphere where new ideas could flow and people went home inspired. See you next year!
November 24, 2025 at 9:26 AM
The sold-out #BSidesAmsterdam event, where 200+ information security enthusiasts joined, was a great day full of inspiring talks.
It brought brilliant minds together and created an atmosphere where new ideas could flow and people went home inspired. See you next year!
It brought brilliant minds together and created an atmosphere where new ideas could flow and people went home inspired. See you next year!
Microsoft recently published a new feature for Defender for Endpoint (#MDE) called Custom Collection.
@olafhartong.nl explains what Custom Collection is and how it work in his blog: falconforce.nl/microsoft-de...
@olafhartong.nl explains what Custom Collection is and how it work in his blog: falconforce.nl/microsoft-de...
November 20, 2025 at 1:10 PM
Microsoft recently published a new feature for Defender for Endpoint (#MDE) called Custom Collection.
@olafhartong.nl explains what Custom Collection is and how it work in his blog: falconforce.nl/microsoft-de...
@olafhartong.nl explains what Custom Collection is and how it work in his blog: falconforce.nl/microsoft-de...
The Oesterreichische Nationalbank hosted this year’s TIBER-EU Provider Conference called T-REX (TIBER/TLPT Resilience Exchange). It was nice to see so many familiar faces at the TIBER-EU event in Vienna.
#redteaming #TLPT #TIBER #TIBEREU
#redteaming #TLPT #TIBER #TIBEREU
November 18, 2025 at 3:06 PM
The Oesterreichische Nationalbank hosted this year’s TIBER-EU Provider Conference called T-REX (TIBER/TLPT Resilience Exchange). It was nice to see so many familiar faces at the TIBER-EU event in Vienna.
#redteaming #TLPT #TIBER #TIBEREU
#redteaming #TLPT #TIBER #TIBEREU
We believe that community-driven events where people share knowledge about information security are crucial. If we can combine that with an intimate atmosphere, we have a winner!
That’s why we have decided to sponsor BSides Amsterdam. www.bsidesams.org
That’s why we have decided to sponsor BSides Amsterdam. www.bsidesams.org
November 12, 2025 at 9:51 AM
We believe that community-driven events where people share knowledge about information security are crucial. If we can combine that with an intimate atmosphere, we have a winner!
That’s why we have decided to sponsor BSides Amsterdam. www.bsidesams.org
That’s why we have decided to sponsor BSides Amsterdam. www.bsidesams.org
@olafhartong.nl presented his research at #KustoCon on using #Kusto and Kusto Graph for something magical. Olaf investigated if it was possible to do the same thing as #BloodHound, but then only using Kusto Graph. He showcased the need for attack path management.
Slides: github.com/olafhartong/...
Slides: github.com/olafhartong/...
November 11, 2025 at 2:25 PM
@olafhartong.nl presented his research at #KustoCon on using #Kusto and Kusto Graph for something magical. Olaf investigated if it was possible to do the same thing as #BloodHound, but then only using Kusto Graph. He showcased the need for attack path management.
Slides: github.com/olafhartong/...
Slides: github.com/olafhartong/...
💡FalconForce has invested its offensive security knowledge and applied R&D into creating high-fidelity detection content; to detect threats that are in the blind spots of many organizations.
👉 Try it for yourself on GitHub: github.com/FalconForceT...
#SOC #kusto #detectionengineering #falconfriday
👉 Try it for yourself on GitHub: github.com/FalconForceT...
#SOC #kusto #detectionengineering #falconfriday
GitHub - FalconForceTeam/FalconFriday: Hunting queries and detections
Hunting queries and detections. Contribute to FalconForceTeam/FalconFriday development by creating an account on GitHub.
github.com
November 7, 2025 at 9:12 AM
💡FalconForce has invested its offensive security knowledge and applied R&D into creating high-fidelity detection content; to detect threats that are in the blind spots of many organizations.
👉 Try it for yourself on GitHub: github.com/FalconForceT...
#SOC #kusto #detectionengineering #falconfriday
👉 Try it for yourself on GitHub: github.com/FalconForceT...
#SOC #kusto #detectionengineering #falconfriday
#SOCs around the world are responsible for keeping the organizations resilient against cyber attacks.
Our solution "Sentry Detect" is an ideal companion for all SOCs using Microsoft Security products. You can learn more about it: falconforce.nl/webinar-sent...
Our solution "Sentry Detect" is an ideal companion for all SOCs using Microsoft Security products. You can learn more about it: falconforce.nl/webinar-sent...
Webinar Sentry Detect - FalconForce
In this webcast, we will take a deep-dive into the inner workings of how we deliver and maintain high-fidelity custom detection content.
falconforce.nl
October 20, 2025 at 7:26 AM
#SOCs around the world are responsible for keeping the organizations resilient against cyber attacks.
Our solution "Sentry Detect" is an ideal companion for all SOCs using Microsoft Security products. You can learn more about it: falconforce.nl/webinar-sent...
Our solution "Sentry Detect" is an ideal companion for all SOCs using Microsoft Security products. You can learn more about it: falconforce.nl/webinar-sent...
Last Friday, at BruCON 0X11, @olafhartong.nl showcased his research on how defensive tooling (#EDR) can provide attackers with opportunities for deception and disruption. Trusting your tooling blindly can be a mistake. You need to make sure you can rely on your security data.
September 29, 2025 at 8:29 AM
Last Friday, at BruCON 0X11, @olafhartong.nl showcased his research on how defensive tooling (#EDR) can provide attackers with opportunities for deception and disruption. Trusting your tooling blindly can be a mistake. You need to make sure you can rely on your security data.
After our “AWS enumeration for purple teams” workshop at OrangeCon, we take a next step. In our #FalconFriday blog (falconforce.nl/falconfriday...) Nikolas explains how to catch threat actors that are harvesting information about your AWS policies.
September 19, 2025 at 12:14 PM
After our “AWS enumeration for purple teams” workshop at OrangeCon, we take a next step. In our #FalconFriday blog (falconforce.nl/falconfriday...) Nikolas explains how to catch threat actors that are harvesting information about your AWS policies.
BruCON 0X11 is just a few days away. @olafhartong.nl will present his talk “# I’m in your logs now, deceiving your analysts and blinding your EDR” on Friday Sept 26. Olaf will show how defensive tooling (EDRs) can provide attackers with opportunities for deception and disruption.
September 17, 2025 at 11:31 AM
BruCON 0X11 is just a few days away. @olafhartong.nl will present his talk “# I’m in your logs now, deceiving your analysts and blinding your EDR” on Friday Sept 26. Olaf will show how defensive tooling (EDRs) can provide attackers with opportunities for deception and disruption.
We had a fantastic time at @orangecon.nl 🎉
It’s always inspiring to see so many security professionals come together to share their knowledge and passion for advancing the industry. That’s exactly why we’re proud to sponsor this event.
It’s always inspiring to see so many security professionals come together to share their knowledge and passion for advancing the industry. That’s exactly why we’re proud to sponsor this event.
September 12, 2025 at 12:12 PM
We had a fantastic time at @orangecon.nl 🎉
It’s always inspiring to see so many security professionals come together to share their knowledge and passion for advancing the industry. That’s exactly why we’re proud to sponsor this event.
It’s always inspiring to see so many security professionals come together to share their knowledge and passion for advancing the industry. That’s exactly why we’re proud to sponsor this event.
Slides from @olafhartong.nl's talk at #bhusa (I’m in your logs now, deceiving your analysts and blinding your EDR) are available now: i.blackhat.com/BH-USA-25/Pr...
August 29, 2025 at 8:37 AM
Slides from @olafhartong.nl's talk at #bhusa (I’m in your logs now, deceiving your analysts and blinding your EDR) are available now: i.blackhat.com/BH-USA-25/Pr...
A big thank you to all participants who joined our 4-day Advanced Detection Engineering in the Enterprise training at BlackHat. It has been a pleasure to have such an engaging group of professionals. We also had a great time in Las Vegas at the #bhusa and #DEFCON conferences. Until next time!
August 21, 2025 at 10:12 AM
Get your ticket before the next price bump.
August is almost around the corner and many people have already signed up. We are excited to see everyone in Las Vegas! No ticket yet? Get it now (next price bump is at 18 July): www.blackhat.com/us-25/traini...
For the fourth consecutive year, we will be back in Las Vegas to facilitate our Advanced Detection Engineering in the Enterprise training!
Get your ticket before May 25. More information and registration: www.blackhat.com/us-25/traini...
#detectionengineering #training
Get your ticket before May 25. More information and registration: www.blackhat.com/us-25/traini...
#detectionengineering #training
July 16, 2025 at 7:32 AM
Get your ticket before the next price bump.
In our latest webinar we proudly presented Sentry Respond - FalconForce’s cloud native automation platform for high maturity SOCs - to the world! You can watch the webinar recording and download the slides from our website: falconforce.nl/webinar-sent... Contact us if you want to learn more!
July 15, 2025 at 12:24 PM
In our latest webinar we proudly presented Sentry Respond - FalconForce’s cloud native automation platform for high maturity SOCs - to the world! You can watch the webinar recording and download the slides from our website: falconforce.nl/webinar-sent... Contact us if you want to learn more!
Reposted by FalconForce
August is almost around the corner and many people have already signed up. We are excited to see everyone in Las Vegas! No ticket yet? Get it now (next price bump is at 18 July): www.blackhat.com/us-25/traini...
For the fourth consecutive year, we will be back in Las Vegas to facilitate our Advanced Detection Engineering in the Enterprise training!
Get your ticket before May 25. More information and registration: www.blackhat.com/us-25/traini...
#detectionengineering #training
Get your ticket before May 25. More information and registration: www.blackhat.com/us-25/traini...
#detectionengineering #training
June 17, 2025 at 7:26 AM
August is almost around the corner and many people have already signed up. We are excited to see everyone in Las Vegas! No ticket yet? Get it now (next price bump is at 18 July): www.blackhat.com/us-25/traini...
Want to learn about how we make your #SOC more effective and enable analysts to make informed decisions faster? Join our webinar on 1 July 2025 16:00h CEST. Register today: events.teams.microsoft.com/event/0447b5...
June 26, 2025 at 7:32 AM
Want to learn about how we make your #SOC more effective and enable analysts to make informed decisions faster? Join our webinar on 1 July 2025 16:00h CEST. Register today: events.teams.microsoft.com/event/0447b5...
August is almost around the corner and many people have already signed up. We are excited to see everyone in Las Vegas! No ticket yet? Get it now (next price bump is at 18 July): www.blackhat.com/us-25/traini...
For the fourth consecutive year, we will be back in Las Vegas to facilitate our Advanced Detection Engineering in the Enterprise training!
Get your ticket before May 25. More information and registration: www.blackhat.com/us-25/traini...
#detectionengineering #training
Get your ticket before May 25. More information and registration: www.blackhat.com/us-25/traini...
#detectionengineering #training
June 17, 2025 at 7:26 AM
August is almost around the corner and many people have already signed up. We are excited to see everyone in Las Vegas! No ticket yet? Get it now (next price bump is at 18 July): www.blackhat.com/us-25/traini...
Reposted by FalconForce
On 1 July 2025 16:00h CEST, we will host our next webinar. It will be all about how we make a #SOC more effective and help analysts with the decision-making process. You can register today: events.teams.microsoft.com/event/0447b5...
May 21, 2025 at 7:54 AM
On 1 July 2025 16:00h CEST, we will host our next webinar. It will be all about how we make a #SOC more effective and help analysts with the decision-making process. You can register today: events.teams.microsoft.com/event/0447b5...