---
title: Recon InfoSec (5)
description: (5)
---

[Skip to content](https://blog.reconinfosec.com/page/5#main-content)

[![recon_infosec.png](https://blog.reconinfosec.com/hs-fs/hubfs/recon-logo-full-on-white.png?width=7680&height=2304&name=recon-logo-full-on-white.png "recon_infosec.png")](http://reconinfosec.com)

- [Website Home](https://www.reconinfosec.com/)

- [Website Home](https://www.reconinfosec.com/)

## [Scaling Enterprise Forensic Timelining](https://blog.reconinfosec.com/scaling-enterprise-forensic-timelining)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/EricCapuano.png) 

[Eric Capuano](https://blog.reconinfosec.com/author/eric-capuano)

In July, Eric & Whitney gave a talk titled "Breaches Be Crazy" at the SANS DFIR Summit outlining...

## [OPENSOC @ DEF CON 29](https://blog.reconinfosec.com/opensoc-def-con-29)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/KelleyWilds.png) 

[Kelley Wilds](https://blog.reconinfosec.com/author/kelley-wilds)

It’s that time of year again - DEF CON! We were thrilled to run OpenSOC again at DEF CON this year,...

## [An Encounter with Ransomeware-as-a-Service: MEGAsync Analysis](https://blog.reconinfosec.com/megasync-analysis)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/AndrewCook.png) 

[Andrew Cook](https://blog.reconinfosec.com/author/andrew-cook)

Recon's SOC recently responded to an attempted ransomware and extortion attack. It had all the...

## [An Encounter With TA551/Shathak](https://blog.reconinfosec.com/an-encounter-with-ta551-shathak)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/AndrewCook.png) 

[Andrew Cook](https://blog.reconinfosec.com/author/andrew-cook)

The Recon incident response team recently responded to a case of business email compromise. The...

## [Threat Hunting - A Critical Component of High Performing SOCs](https://blog.reconinfosec.com/threat-hunting-a-critical-component-of-high-performing-socs)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/AndrewCook.png) 

[Andrew Cook](https://blog.reconinfosec.com/author/andrew-cook)

Whether your cybersecurity detection and response capabilities are in-house or managed through a...

## [SOC X 2021 - A Recap](https://blog.reconinfosec.com/soc-x-2021-a-recap)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/KelleyWilds.png) 

[Kelley Wilds](https://blog.reconinfosec.com/author/kelley-wilds)

We can't start a recap post without a huge THANK YOU to the community for joining us last week and...

## [Detecting Threats with Graylog Pipelines - Part 3](https://blog.reconinfosec.com/detecting-threats-with-graylog-pipelines-part-3)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/EricCapuano.png) 

[Eric Capuano](https://blog.reconinfosec.com/author/eric-capuano)

Now that we've normalized and enriched our events, let's get into the actual threat detection logic...

## [Detecting Threats with Graylog Pipelines - Part 2](https://blog.reconinfosec.com/detecting-threats-with-graylog-pipelines-part-2)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/EricCapuano.png) 

[Eric Capuano](https://blog.reconinfosec.com/author/eric-capuano)

In my previous post, I explained the fundamental purpose and use cases of pipelines in Graylog –...

## [Detecting Threats with Graylog Pipelines - Part 1](https://blog.reconinfosec.com/detecting-threats-with-graylog-pipelines)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/EricCapuano.png) 

[Eric Capuano](https://blog.reconinfosec.com/author/eric-capuano)

If you are here hoping to learn more about using Graylog for the purpose of monitoring the security...

## [The Training Secrets of Great Security Operations Teams](https://blog.reconinfosec.com/the-training-secrets-of-great-security-operations-teams)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/BobDrobish.png) 

[Bob Drobish](https://blog.reconinfosec.com/author/bob-drobish)

At Recon InfoSec we have the honor of working with some of the best security operations, incident...

<https://blog.reconinfosec.com/page/4> [3](https://blog.reconinfosec.com/page/3) [4](https://blog.reconinfosec.com/page/4) [5](https://blog.reconinfosec.com/page/5) [6](https://blog.reconinfosec.com/page/6) [7](https://blog.reconinfosec.com/page/7) <https://blog.reconinfosec.com/page/6>

© 2026 All rights reserved. [RSS Feed](https://blog.reconinfosec.com/rss.xml)