What detection format would you like to have if you got detections online? (e.g. for a recent attack/vuln wave like php2shell)
#dfir #infosec #cybersecurity #askfedi #incidentresponse #osint #threatintel #threatintelligence #opensourceintelligence
What detection format would you like to have if you got detections online? (e.g. for a recent attack/vuln wave like php2shell) #dfir #infosec #cybersecurity #askfedi #incidentresponse #osint #threatintel #threatintelligence #opensourceintelligence
Sigma 32%
Just gimme hashes and IPs 20%
Yara 24%
KQL 20%
Other (please specify) 4%
13 people · Closed
