Mapping a cyber attack — the Italian case
Mapping a real Italian intrusion onto the MITRE ATT&CK framework: phases, techniques, telemetry sources and lessons for SOC detection-engineering.
Tag
Detection Engineering
Read the analysis
Cyber Defence: 3 priorities for enterprise security
Three foundational defensive activities every organisation should run continuously: monitoring, detection-engineering and incident response — paired with threat intelligence.
Compromise and Mining — Detection & Response
Cryptomining as a post-compromise objective: indicators on Linux and Windows endpoints, persistence techniques, network signals and containment workflow.
