From Munitions to Malware: Joseph Harrison on Threat Detection & Digital Forensics

This interview with a Threat Detection Operations Lead describes SOC workflows, threat hunting practices, and an investigative case where a ClickFix phishing page led to a blocked PowerShell download cradle and indicators tied to a RAT/StealC campaign; the analyst details using EDR telemetry, network analysis, Hunt.io enrichment, and subsequent mitigation actions while emphasizing detection tuning, logging tradeoffs, and automation vs. human review.