Recent posts

• Auditing LDAP Queries for Active Directory Enumeration
  Jul 9, 2026 detection threat-hunting elastic active-directory ldap windows
• Hunting Vulnerable Conditions in SIEM at Scale
  Jun 17, 2026 detection threat-hunting elastic siem osquery endpoint windows
• Enrich Your SIEM Data with Spur, Part 2 - Practical Approach
  May 7, 2026 detection siem enrichment elastic spur
• Xintra Labs: Pro Labs for Defenders
  May 3, 2026 training dfir blue-team xintra elastic
• Detecting Copy Fail (CVE-2026-31431) with auditd and Elastic EQL
  Apr 30, 2026 detection auditd elastic linux cve