SOCLabs
@DetectionLabs
Followers
41
Following
35
Media
4
Statuses
24
We are building a SIEM learning and training platform for detection engineers.
Joined April 2024
🚨 Just released: Browser Credential Theft Detection Challenge! 🕵️♂️🔐.It covers credential theft methods for multiple browsers 🛡️.Test if you can complete the challenge and validate your detection rules!.👇 Try it now: #ThreatDetection #BlueTeam #SIEM
0
4
8
🚨 New Detection Challenge! 🚨. SOCLabs just launched a Password Spraying & Credential Access Detection challenge!.Test your SIEM query skills and see if you can catch the attack. Ready to level up? Try it now on SOCLabs! 🔍💻. 👉 #CyberSecurity #SIEM
0
1
9
RT @pcrisk: ClickFix variant targeting Mac users through X ads. Tries tricking users into "cleaning" their Macs by running a terminal comma….
0
7
0
RT @br0k3ns0und: Thanks for the shoutout to the Zen of Security Rules. Cool initiative to see this applied to thre….
br0k3nlab.com
Abstract The Zen of python does a perfect job succinctly capturing guiding principles for developing via 19 aphorisms. This is the zen of writing security rules, for fostering high-quality, high-ef...
0
3
0
RT @SEKTOR7net: An increased visibility into threads' call stacks helps with more reliable malware detection. The approach is based on ETW….
0
23
0
RT @shotgunner101: Used Claude to generate a Splunk query to hunt for browser exploits and potential @mrd0x #FileFix #clickfix like behavio….
pastebin.com
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
0
12
0
Inspired by this new FileFix technique from @mrd0x , we've launched a hands-on detection challenge!.Write and test SIEM rules Splunk, Elastic, KQL, Sigma, OpenSearch in your browser. Try it now: 👉 https:#SIEM #DetectionEngineering #CyberSecurity #FileFix.
1
9
43
And us.
How to become a decent detection engineer:.1. Download Aurora.2. Run whatever your EDR misses through Aurora.3. Deploy the Sigma rules from Aurora to your SIEM.
0
0
0
RT @al3x_n3ff: Did you know that you can kerberoast without any valid credentials? All you need is an account that is ASREProastable. This….
0
115
0
Have you ever detected suspicious ipconfig commands? Check out this great article (by. monik123.) on how to spot suspicious ipconfig process chains 👇: #Cybersecurity #SIEM #DetectionEngineering #ThreatDetection #BlueTeam.
systemweakness.com
SOCLabs has recently released a new Windows challenge called Detecting Suspicious ipconfig Execution, which reminded me of a similar…
0
0
2
RT @elasticseclabs: #ElasticSecurityLabs has uncovered EDDIESTEALER, a novel Rust-based info stealer distributed via fake CAPTCHA campaigns….
elastic.co
Elastic Security Labs walks through EDDIESTEALER, a lightweight commodity infostealer used in emerging CAPTCHA-based campaigns.
0
21
0