Threat Command

Primary threat research from Elastic Security Labs Threat Command.

Filters
Testing your Okta visibility and detection with Dorothy and Elastic Security
Detection Engineering

Testing your Okta visibility and detection with Dorothy and Elastic Security

Dorothy is a tool for security teams to test their visibility and detection capabilities for their Okta environment. IAM solutions are frequently targeted by adversaries but poorly monitored. Learn how to get started with Dorothy in this post.

David French
Practical security engineering: Stateful detection
Detection Engineering

Practical security engineering: Stateful detection

By formalizing stateful detection in your rules, as well as your engineering process, you increase your detection coverage over future and past matches. In this blog post, learn why stateful detection is an important concept to implement.

Samir Bousseaden
Embracing offensive tooling: Building detections against Koadic using EQL
Detection Engineering

Embracing offensive tooling: Building detections against Koadic using EQL

Find new ways to build behavioral detections against post-exploitation frameworks such as Koadic using Event Query Language (EQL).

Daniel Stepanic