James D

@FranticTyping

Threat Hunting | Detection Engineering | Defensive Automation (ex @Countercept, @mwrlabs)

blog.securehat.co.uk

Joined April 2008

447 Following

833 Followers

Replies Reposts Media

Pinned
James D
@FranticTyping
Aug 23, 2022
I'm happy to announce the release of Chainsaw v2! 🥳 Chainsaw allows users to rapidly search through Windows event logs and hunt for threats using @sigma_hq detection rules, all without a SIEM! Version 2 includes some exciting new features, info in 🧵
GitHub - WithSecureOpenSource/chainsaw: Rapidly Search and Hunt through Windows Forensic Artefacts
From github.com
13
James D
@FranticTyping
Dec 11, 2023
Slides from this talk are now available here: github.com/FranticTyping/…
James D
@FranticTyping
Dec 9, 2023
My talk "Scaling Detection and Response Teams - Enabling Efficient Investigations" is at 3:45pm today at #BSidesLDN2023 on track 2! Come down and say hi if you're around 😀 pretalx.com/bsides-london-…
James D
@FranticTyping
Dec 9, 2023
My talk "Scaling Detection and Response Teams - Enabling Efficient Investigations" is at 3:45pm today at #BSidesLDN2023 on track 2! Come down and say hi if you're around 😀
sched.securitybsides.org.uk
Scaling Detection and Response Teams - Enabling Efficient Investigations Bsides London 2023
Help! We’ve bought the latest tools, we’ve got all our logs in a SIEM, we’ve tuned and tweaked our detection rules, we’ve even built investigation playbooks… but we still don’t have enough time to...
2
James D
@FranticTyping
Sep 25, 2023
Scaling detection and response operations at Coinbase part 2 & 3: 🔍 Driving context into detection logic with machine and user profiles 🔧 Codifying automatic remediation for high-risk detections 📫 Automating alert triage with employees via Slackbot coinbase.com/blog/scaling-d…
1
James D
@FranticTyping
Sep 11, 2023
The first part of my blog series on how we’ve been scaling detection and response operations at Coinbase is live! Interested in speeding up your investigations, increasing the visibility of key data sources, and improving quality of life for analysts? coinbase.com/blog/scaling-d…
3