Some stuff about security..

While I was creating some Splunk use cases to detect malware (together with Sysmon ) I was doing some test with malware Refete which I wrote...

Following my last post about how to hunt for malicious PowerShell commands, I'm interested to detect Mimikatz once it is launched thr...

Sysmon is a monitoring tool which combined with Splunk makes an excellent tandem for threat hunting.  A good example was presented by  Tom...