Building a Home Detection Lab with Sysmon, Zeek, and Sigma
A practical blueprint for a lab that lets you write a detection, generate the telemetry, and prove the rule fires — all on one machine.
Detection Engineering
EDR Telemetry: What Your Defenses Actually See
A look at the data EDR agents collect, and why understanding it is the difference between evasion research and guessing.