Resources

Curated Security Resources

A growing collection of tools, references, and reading I keep coming back to. This page is a work in progress — more coming soon.

Detection Engineering

Sigma HQ Generic signature format for SIEM systems. MITRE ATT&CK Adversary tactics and techniques knowledge base. Detection Engineering Weekly Newsletter on all things detection.

Threat Intelligence

MITRE D3FEND Knowledge graph of defensive countermeasures. The DFIR Report Real intrusions, analyzed end to end.

Tooling

Zeek Network security monitoring framework. Velociraptor Endpoint visibility and digital forensics.