21 Tags

#Architecture6 #ClickHouse1 #Cryptography1 #Cybersecurity2 #Data Engineering1 #Data Modeling1 #Detection Engineering2 #EDR8 #ETW1 #Filesystems1 #Grafana1 #Linux1 #macOS1 #Networking1 #Podman1 #Process Monitoring1 #Response2 #SIEM1 #Telemetry3 #Vector1 #Windows2

#Architecture

What You Cannot See -

Cutting the Network from Inside -

The Authority Problem -

Naming Things That Move -

The Shape of a Pipeline -

How an Operating System Decides to Let You Watch It -

#ClickHouse

Building a Mini-SIEM Lab: Sysmon, Vector, Redpanda, ClickHouse & Grafana -

#Cryptography

The Authority Problem -

#Cybersecurity

Building a Mini-EDR Agent - Monitoring Process Creation with ETW in C -

Building a Mini-SIEM Lab: Sysmon, Vector, Redpanda, ClickHouse & Grafana -

#Data Engineering

The Shape of a Pipeline -

#Data Modeling

Detection Is a Data-Modeling Problem -

#Detection Engineering

Detection Is a Data-Modeling Problem -

What You Cannot See -

#EDR

Detection Is a Data-Modeling Problem -

What You Cannot See -

Cutting the Network from Inside -

The Authority Problem -

Naming Things That Move -

The Shape of a Pipeline -

How an Operating System Decides to Let You Watch It -

Building a Mini-EDR Agent - Monitoring Process Creation with ETW in C -

#ETW

Building a Mini-EDR Agent - Monitoring Process Creation with ETW in C -

#Filesystems

Naming Things That Move -

#Grafana

Building a Mini-SIEM Lab: Sysmon, Vector, Redpanda, ClickHouse & Grafana -

#Linux

How an Operating System Decides to Let You Watch It -

#macOS

How an Operating System Decides to Let You Watch It -

#Networking

Cutting the Network from Inside -

#Podman

Building a Mini-SIEM Lab: Sysmon, Vector, Redpanda, ClickHouse & Grafana -

#Process Monitoring

Naming Things That Move -

#Response

Cutting the Network from Inside -

The Authority Problem -

#SIEM

Building a Mini-SIEM Lab: Sysmon, Vector, Redpanda, ClickHouse & Grafana -

#Telemetry

Detection Is a Data-Modeling Problem -

What You Cannot See -

The Shape of a Pipeline -

#Vector

Building a Mini-SIEM Lab: Sysmon, Vector, Redpanda, ClickHouse & Grafana -

#Windows

How an Operating System Decides to Let You Watch It -

Building a Mini-EDR Agent - Monitoring Process Creation with ETW in C -