Manish Rawat
Manish Rawat @RawatManish21 ·
#ThreatHunting #DetectionEngineering While Investigating the dataset, I found a EventID which at first looks like just a noise but then I pivoted to its Processguid and found a complete attack chain. Writing this up for Part 2 on Monday. Link is in the comment section of Part1.
1
18
Psychic Lab Ape
Psychic Lab Ape @psyciclabs ·
Hot take: AI writing detection rules is exciting, but don't skip the human review. AI drafts fast, humans catch the edge cases. Best combo = AI speed + analyst intuition. #DetectionEngineering #SOC
12