🛡️ SOC Engineering
😺
GitHub Projects
☢️ DEATH : Detection Engineering And Threat Hunting
🔎
Misc
Infosec Game-Sense
You can learn a lot just by following these people (my personal opinion)
Introduction
Developing a game-sense in cybersecurity is something you can't do on your own, specially if you're just starting in this field. Personally I think knowing how to think, predict and act when facing cybersecurity difficult situations is as important as having the technical requirements to resolve the issue.
In this blog post you will find a list of people who helped me personally during 2020 to build a mindset for cybersecurity whether with a blog post, a video tutorial, an open-source project, a conference talk or just by sharing their thoughts. These people are absolutely worth following and, whether they know it or not, helped me a lot just by reading/watching their stuff.
Agents of S.O.C
As a junior SOC analyst the following people shaped, in many different ways, my point of vue of a SOC/SIEM environment and how can I approach solving related issues.
Agents of S.H.I.E.L.D
- Follow @SecHubb : Went through it all, from Tier 1 SOC analyst to SOC lead, knows the good the bad and the ugly.
- Follow @SecurityMapper : His open-source projects and talks are a must to watch. (Great teaching skills btw)
- Follow @chrissanders88 : The amount of research dedicated to SOC analysts' way of thinking and their daily issues is tremendous.
- Follow @jhencinski : A Tweeter of a niche. Not so many people out there give detailed insights on how to measure your SOC's effectiveness.
DEATH Specialists
Detection Engineers And Threat Hunters is one of my favorite lists where you can find some low-level approaches to building detections and hunting for malicious behaviors.
Death specialist trooper from Star Wars
- Follow @Hexacorn : Adam is an all rounder, putting him in a category is just not fair (sorry but I had to) definitely check his blog posts.
- Follow @jaredcatkinson : Reshaping detection engineering. The Funnel of Fidelity blog post among others are definitely illuminating.
- Follow @olafhartong : Great contributor to the community. Definitely keep an eye on his medium posts
- Follow @DavidJBianco : Valuable insights on threat hunting approaches. The inventor of Pyramid of Pain
- Follow @BlackMatter23 : Great Threat Hunting and Detections engineering insight. His quizzes are awesome.
- Follow @nas_bench: Share great articles with deep blue team inspection & analysis. Keep an eye on his medium page.
- Follow @jonasLyk: Another Windows wizard. Their insights are really a necessity for both Red & Blue Teamers.
- Follow @Cyb3rMonk: Shares great Threat Hunting tips and contributes to the community with his great articles on medium.
- Follow @ionstorm: Provides great contributions to the infosec community by their insights and GitHub projects.
The RevEngers
Reverse Engineers and Malware Analysts are definitely always on my watchlist.
Revengers (Marvel)
- Follow @0verfl0w_ : His 0ffset.net website and courses are definitely a great place to get into malware analysis and reverse engineering.
- Follow @malware_traffic : You've definitely analyzed one of their PCAPs before on malware-traffic-analysis
- Follow @vxunderground : Their website vx-underground.org is a gold mine for malware samples and papers.
- Follow @krabsonsecurity: Great Malware research and reverse engineering content, definitely check their blog.
The Forensicators
The DFIR community, the mother of all, where nothing is really deleted or hidden and when everything is on fire, they're the ones sent in.
JASON BARD from Detective Comics (DC)
- Follow @EricRZimmerman: One of the greatest contributors to the DFIR community with his amazing set of tools EZTools.
- Follow @maridegrazia: Great forensics tool maker and her blog posts are very informative, helped me a lot
- Follow @CyberRaiju: Known for various topics but his DFIR blog post is a reference to any forensics analyst.
- Follow @DFIRmadness : If you want to know about the "Thrill of the Hunt" from a defense perspective, DFIRMadness.com blogs are a great place to learn.
- Follow @DfirDiva: Her dfirdiva.com is loaded with great deal of information for anyone trying to get into infosec and DFIR.
- Follow @_RyanBenson: Great tool maker and the man behind #DailyDFIR where he shared daily insights about DFIR
- Follow @4n6ist: Shares great tips about Digital Forensics. Definitely check their website kazamiya.net
Clairvoyants
Cybersecurity Threat Intelligence analysts, they have seen it coming from miles away.
Professor X (X-MEN)
- Follow @MITREattack : I tried to only include people not organizations otherwise the list would be too long but this is an exception that needs no introductions.
Red Angels
You can't protect it if you don't know where & how it can be attacked. These people helped me in many ways to grasp many aspects of attack techniques in order to provide and build better detections.
The Red Angel (Star Trek Discovery)
Cybersecurity Blogs
In this section I tried to put a list of one of the best blogs out there (IMO) for researching and studying for both offensive and defensive purposes:
Last modified 10mo ago