By This Author
Better know a data source: Logon sessions Better know a data source: Logon sessions
July 19, 2022
Threat detection Better know a data source: Access tokens (and why they’re hard to get) Better know a data source: Access tokens (and why they’re hard to get)
April 14, 2022
Threat detection Better know a data source: Process integrity levels Better know a data source: Process integrity levels
December 9, 2021
Threat detection The dark side of Microsoft Remote Procedure Call protocols The dark side of Microsoft Remote Procedure Call protocols
November 10, 2021
MITRE ATT&CK