Posts on ttp

Making Sense of the Data Heap: Moving to Actionable Threat Intel

Why hoarding threat feeds is useless and how we can climb the Pyramid of Pain using behavioral detection and Sigma rules instead of just chasing IPs.