Nieuws & Onderzoek

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

A deep dive into Entra ID Identity Protection for Incident Response

The Azure log you probably didn’t know existed

The Microsoft Graph for Unified Audit Log acquisitions is here!

The mystery of the EnrichedOffice365AuditLogs solved

What DFIR experts need to know about the current state of the Unified Audit Log

The curious case of DangerDev@protonmail.me

Major update(v 1.2) for the Microsoft Extractor Suite

Do not use the Get-MgAuditLogSignIn for your investigations!

Ransomware in the cloud

AWS CloudTrail cheat sheet

A Defenders Guide to GraphRunner — Part II

A Defenders Guide to GraphRunner — Part I

Cloud Incident Response trainings

Everything you need to know about the MicrosoftGraphActivityLogs

Automated AWS Incident Response — The next episode

5 Tips to prevent or limit the impact of an incident in Azure

Automated First-Response in AWS using Sigma and Athena

Importing Windows Event Log files into Splunk

The Evolution of Business Email Compromise

Welcome 👋 Microsoft Extractor Suite

Responding to an attack in AWS

Incident Response in Azure

A Royal update

Introduction of the Microsoft 365 Extractor suite

Set up Splunk for Incident Response in GCP in 15 minutes..

Responding to macOS attacks — Part II

Top 5 Windows Events for Incident Response

Responding to a Cobalt Strike attack — Part III

Responding to a Cobalt Strike attack — Part II

Responding to a Cobalt Strike attack — Part I

Responding to macOS attacks — Part I