Detection Engineering – NetwerkLABS

Detection Engineering: An Introduction

Detection Engineering As cybersecurity environments continue to evolve, adversaries are becoming increasingly sophisticated, making cyber threats more frequent and difficult to detect. To keep pace with this changing landscape, organizations must adopt proactive security practices and…

Bharath Narayanasamy detection_engineering

MITRE ATT&CK Detection Engineering Threat Hunting

Using MITRE ATT&CK Navigator to Strengthen Threat Modelling [PART: II]

🎯 A Hands-On, Step-by-Step Walkthrough 📚 1. Why Map a Threat Group at All? A threat model that stops at "we might get hacked" is not much use. ATT&CK lets you say something far more specific:…

Bharath Narayanasamy

Threat Hunting DETECT Detection Engineering

8 LOLBins Every Threat Hunter Should Know

🕵️‍♂️ 8 Key LOLBins and Hunting Them with Elastic Security 🎯 Attackers love tools that are already installed, already signed and already trusted. This post walks through the eight Windows binaries that showed up most often…

Bharath Narayanasamy LOLBINs

ATTACK Detection Engineering DETECT

Living Off the Land (LOTL) Resources

🌿 Living Off the Land (LOTL) Resources 🗺️ 🎯 Attackers don't always bring their own tools. Sometimes the best weapon is already sitting on the machine. This guide walks through a well-organized collection of Living Off…

Bharath Narayanasamy LOLBINs, LOTL

DETECT Purple Teaming Detection Engineering

Misbehaving binaries: Hunting LOLBins

🕵️‍♂️ Detection Engineering: Catching jsc.exe Abuse (T1127) 🟣 Technique: Trusted Developer Utilities Proxy Execution (MITRE ATT&CK T1127)🔵 Tool abused: jsc.exe, the Microsoft JScript .NET compiler🟢 Stack: Atomic Red Team ➜ Sysmon ➜ Elastic Agent ➜ Elastic…

Bharath Narayanasamy LOLBINs

Detection Engineering RED TEAM DETECT

Operationalizing Security: CALDERA Meets WAZUH (PART II)

Adversary emulation with Caldera and Wazuh Please visit here to read PART I of this series, which explains the Caldera setup and Windows agent installation. Agent setup Deploy Agents on Linux machines Now, the lab consists…

Bharath Narayanasamy wazuh, caldera

wazuh Purple Teaming Web Pentest

Wazuh: Detecting Web Attacks

Bharath Narayanasamy wazuh

Threat Hunting DETECT MITRE ATT&CK

THREAT EMULATION: Introduction

Purpose of Threat Emulation Threat emulation is meant to assist security teams and organisations, in general, in better understanding their security posture and their defence mechanisms and performing due diligence in their compliance. Are our people…

Bharath Narayanasamy BAS, THreat, Emulation