category

Threat Hunting

filter: all dfir hackthebox malware analysis threat hunting
Threat Hunting 25 Nov 2025
Why Proactive Threat Hunting Matters: A Primer
Waiting for alerts to fire means the attacker is already inside. This primer covers what proactive threat hunting actually means, how to form testable hypotheses, and the data sources you need before you can hunt anything.
→
Threat Hunting 28 Oct 2025
Building Useful Splunk Dashboards for a Home SOC
Most Splunk tutorials show dashboards with clean data. Real log data is messy. The searches that actually work.
→
Threat Hunting 30 Sep 2025
Detecting Mimikatz Without Signature-Based Rules
Mimikatz has hundreds of variants and most AV signatures fall behind. Behavioural detection approaches that catch it regardless of version.
→