| … 2026-11-05 70 Sergio Albea True The Sound of Silence: SAP SM49/SM69 and the OS Commands Your SIEM Never Hears 2026-09-20 60 Rohan Taluja True Rhysida in Germany - From an Early Ransomware Payload to the 2026 Stuttgart and Berlin Threat… 2026-09-05 78 SIMKRA True Ultimate Threat Hunting Playbook for Russian Cyber Operations in a Hybrid Threat Environment 2026-08-08 90 SIMKRA True Attackers Don’t Need Your Devices Anymore They Just Need Your Identity. 2026-08-04 72 Rohitashokgowd True SIEM Bypasses: Diffracting the “CreepyDrive URLs” Sentinel Rule 2026-07-27 70 Nikolas Bielski True Detection Engineering in the Era of Semantic Malware 2026-07-09 50 Koifsec True Testing AI Threat Hunting against Real-World KQL: A Side-by-Side Test 2026-06-23 30 Alex Teixeira True DCOM Explained: How Attackers Turn a Windows Feature into a Lateral Movement Tool 2026-06-18 60 Zshan Hyder True The Interesting Case of WSL for Payload Staging 2026-06-05 60 Koifsec True The AI-Embedded SOC: An Operating Model for the Asymmetry Era 2026-05-29 88 Omar Tarek Zayed True Hunt Before They Hide -From Device Codes to Fake IT Support Detecting Active Microsoft 365 Identity… 2026-05-26 85 Rohitashokgowd True Detection Logic Bugs, Developing Context to Bypass MiniPlasma Rules 2026-05-23 75 Nikolas Bielski True The Hidden Security Risk in Microsoft Teams: Detecting AI Note-Taking Bots with KQL 2026-05-14 35 Bi Yue Xu True Unmanaged PowerShell Execution: Hunting Beyond powershell.exe 2026-05-08 60 Nesrine Cherrabi True Hunting ClickFix Win + X Variants 2026-05-08 50 Manuel Arrieta True Analyzing GLOBAL GROUP (BlackLock) Artifacts 2026-04-24 80 SIMKRA True Threats based on Clipboards actions (+ KQL Query) 2026-03-30 45 Sergio Albea True A Detection Researcher Mindset — DCSYNC T1003.006 2026-03-27 45 Scott Plastine True Ghost in LSASS: Detecting KslKatz Credential Dumping Framework 2026-03-27 35 Omar Tarek Zayed True Detecting RegPwn by Behavior, Not Binary 2026-03-23 60 Omar Tarek Zayed True The Invisible Kill Chain: Detecting Non-Human Identity Attacks Across Telemetry Boundaries 2026-03-01 90 Koifsec True Shai Hulud 2.0 Campaign 2026-01-12 85 SIMKRA True Detection of Kerberos Golden Ticket Attacks via Velociraptor 2026-01-11 78 dfirloading True Hunting Fileless Malware in the Windows Registry 2025-06-24 30 Manuel Arrieta True 
