Not long ago I did a presentation for the UKCSC, and this Detection Engineering “starter pack” pointed to the resources discussed, check it out 🦈

github.com/rfackroyd/de...

For those of you returning after a while, this is how you can make your own domain your BlueSky handle. Decent feature IMO

bsky.social/about/blog/4...

More key reading for detection engineers looking to create robust detection rules

posts.specterops.io/capability-a...

Also, please DM me any users you think should be on here.

Something for the side-project people!

This is a site that shows you SaaS, PaaS, IaaS, and other solutions with free developer tiers

free-for.dev

Seeing more examples of malware sitting in the root of Public or ProgramData directories...

Use a regex like this to pin these down.

C\:\\ProgramData\\[^\\\/]{0,50}\.(exe|js|vbs|vbe|ps1|hta|bat)

Key reading for anyone in cyber threat detection. They have really managed to crystallise the core strategy underprinning robust detection rules

center-for-threat-informed-defense.github.io/summiting-th...

Join if you are keen on talking Detection Engineering! #cyber #detection #edr #siem

bsky.app/profile/did:...

Hey all am here to chat all things Security, Threat Hunting, Intelligence and Detection Engineering

Can anyone recommend some open source tools to find my Twitter following list on BlueSky?

Quick pivoting tip - "Similar by imphash" on VT allows you to quickly identify other samples that have imported the same libraries and called the subsequent functions in the same order. #ThreatIntelligence #ThreatHunting

*cracks fingers*

right, onto the next social media platform

hopefully this one is good for the infosec crowd