Tag

Threat-Hunting

2 briefs RSS

SOC Analyst Toolkit with Threat Hunting Queries

A free, offline SOC toolkit aimed at Tier 1 analysts includes IR checklists, triage playbooks, and threat hunting guides mapped to MITRE ATT&CK, with Splunk and Elastic queries for threats such as Kerberoasting, Pass-the-Hash, LOLBAS, scheduled task persistence, and C2 on non-standard ports.

soc blueteam threat-hunting

2r 1t 2i Mar 18, 2026

medium advisory

Impact of Poor Security Operation Center (SOC) Metrics

2 rules 2 TTPs

Poorly chosen performance metrics can significantly impair a SOC's ability to detect and respond to threats, leading to ineffective security operations and potential compromise.

SharePoint soc metrics threat-hunting detection

2r 2t Jan 2, 2024