Awesome SOC Analyst RepositoryI made another repo for SOC Analysts. Find it here: Awesome SOC Analyst! The list includes incident investigation, blogs, newsletters, good reads, books, trainings, podcasts, Twitter/X accounts and a set of online tools for day-to-day investigations. The repo generates a bookmark file for easy import to your browser. I will mostly include resources that are tailored as much as possible to the role of the SOC Analyst and not the field of cyber security in general.

Awesome Detection Engineer RepositoryI finally got some time to arrange my bookmarks into an awesome list for Detection Engineers. Find it here Awesome Detection Engineer! The list includes detection rules, detection logic, attack samples, detection tests and emulation tools, logging configuration and best practices, event log references, resources, labs, data manipulation online tools, blogs, newsletters, good reads, books, trainings, podcasts, videos and twitter/x accounts. The repo generates a bookmark file for easy import to your browser.

This post will be updated with links to blogs that I publish on other sites. NVISO 2025-01-16 Detecting Teams Chat Phishing Attacks (Black Basta) 2024-09-05 Validate your Windows Audit Policy Configuration with KQL