An Encounter With TA551/Shathak
The Recon incident response team recently responded to a case of business email compromise. The...
An Encounter With TA551/Shathak
Detecting Threats with Graylog Pipelines - Part 3
Now that we've normalized and enriched our events, let's get into the actual threat detection logic...
Detecting Threats with Graylog Pipelines - Part 2
In my previous post, I explained the fundamental purpose and use cases of pipelines in Graylog –...
Detecting Threats with Graylog Pipelines - Part 1
If you are here hoping to learn more about using Graylog for the purpose of monitoring the security...
The Training Secrets of Great Security Operations Teams
At Recon InfoSec we have the honor of working with some of the best security operations, incident...
Endpoint Logging For The Win!
Whether you're on the Defensive or Offensive side of security, it's important to understand how...
Recon Launches SOC X
The Recon team is excited to announce the launch of SOC X™, the Professional SOC Team World...
Recon Launches Network Defense Range (NDR) Live Online
The Recon team is thrilled to announce our newest offering, NDR Live Online!
Securing Your Velociraptor Deployment
Our team are huge fans of Velociraptor. It's an incredibly powerful tool, for both DFIR and...
Integrating Thinkst Canaries with TheHive
We've been big fans of the Thinkst platform for a while now. We may have mentioned them a time or...