Infosec Game-Sense
You can learn a lot just by following these people (my personal opinion)
Last updated
You can learn a lot just by following these people (my personal opinion)
Last updated
Developing a game-sense in cybersecurity is something you can't do on your own, specially if you're just starting in this field. Personally I think knowing how to think, predict and act when facing cybersecurity difficult situations is as important as having the technical requirements to resolve the issue.
In this blog post you will find a list of people who helped me personally during 2020 to build a mindset for cybersecurity whether with a blog post, a video tutorial, an open-source project, a conference talk or just by sharing their thoughts. These people are absolutely worth following and, whether they know it or not, helped me a lot just by reading/watching their stuff.
As a junior SOC analyst the following people shaped, in many different ways, my point of vue of a SOC/SIEM environment and how can I approach solving related issues.
Detection Engineers And Threat Hunters is one of my favorite lists where you can find some low-level approaches to building detections and hunting for malicious behaviors.
Reverse Engineers and Malware Analysts are definitely always on my watchlist.
The DFIR community, the mother of all, where nothing is really deleted or hidden and when everything is on fire, they're the ones sent in.
Cybersecurity Threat Intelligence analysts, they have seen it coming from miles away.
You can't protect it if you don't know where & how it can be attacked. These people helped me in many ways to grasp many aspects of attack techniques in order to provide and build better detections.
In this section I tried to put a list of one of the best blogs out there (IMO) for researching and studying for both offensive and defensive purposes:
Photo Credit
: Eye opening articles and SOC/SIEM/Detection critical thinking.
: SOC visionary thinking
: Couldn't find him on Twitter, His latest is just amazing.
: Went through it all, from Tier 1 SOC analyst to SOC lead, knows the good the bad and the ugly.
: His open-source projects and talks are a must to watch. (Great teaching skills btw)
: The amount of research dedicated to SOC analysts' way of thinking and their daily issues is tremendous.
: A Tweeter of a niche. Not so many people out there give detailed insights on how to measure your SOC's effectiveness.
: Looking for SOC automation? This is your guy!
: His talk changed my mind about a lot of things.
: They share some great insights about daily SecOps challenges.
Photo Credits
: Threat hunting encyclopedia. Everything he tweets should be documented!
: The amount of contributions to the infosec community is just incredible.
: Big add to the community with his data science approaches.
: Author of SIGMA, RACCINE, LOKI, THOR and many other great projects.
: Adam is an all rounder, putting him in a category is just not fair (sorry but I had to) definitely check his .
: Thorough analysis and structural explanations. Check his blog posts on
: His blog posts are definitely a must read.
: Reshaping detection engineering. blog post among others are definitely illuminating.
: His is one of the best articles I read in 2020.
: Great contributor to the community. Definitely keep an eye on his
: Valuable insights on threat hunting approaches. The inventor of Pyramid of Pain
: The incarnation of "You Can Run, But You Can’t Hide"
: His PowerShell detection talks are a must watch.
: Great Threat Hunting and Detections engineering insight. His quizzes are awesome.
: Share great articles with deep blue team inspection & analysis. Keep an eye on his medium page.
: A Windows wizard with deep level of knowledge.
: Another Windows wizard. Their insights are really a necessity for both Red & Blue Teamers.
: Shares great Threat Hunting tips and contributes to the community with his great articles on medium.
: Great infosec contributor, known for his work on SIGMA project.
: Shares great insights and tips specially related to Splunk.
: Provides great contributions to the infosec community by their insights and GitHub projects.
Photo Credits
: If you're a SOC/Malware analyst you've probably used one of her tools.
: Expect nothing but exclusif infosec content.
: Daily malware analysis and IoCs
: His website and courses are definitely a great place to get into malware analysis and reverse engineering.
: Great content creator on YouTube with many tutorials on malware analysis
: Daily analysis and insights.
: Daily malware analysis and IoCs
: Daily malware analysis and IoCs
: You've definitely analyzed one of their PCAPs before on
: Their website is a gold mine for malware samples and papers.
: An android malware specialist.
: His tutorial videos and malware analysis challenges are a must to go through.
: Daily malware analysis and IOCs.
: Daily malware samples submissions and analysis.
: Great tool maker and book writer about malware analysis.
: Great Malware research and reverse engineering content, definitely check their blog.
Photo Credits
: One of the greatest contributors to the DFIR community with his amazing set of tools .
: Makes great tools for Maldoc analysis and many more.
: Writes great books and makes great tools for DFIR community.
: Great forensics tool maker and her blog posts are very informative, helped me a lot
: His blogs at the e-forensicsmag.com are gold.
: The best YouTube DFIR content maker (IMHO)
: Known for various topics but his DFIR blog post is a reference to any forensics analyst.
: Knew her from her and on AmCache. Definitely eye opener
: Great tool maker and definitely check their blog.
: If you want to know about the "Thrill of the Hunt" from a defense perspective, blogs are a great place to learn.
: Maintains a great website for weekly DFIR news ().
: Her is loaded with great deal of information for anyone trying to get into infosec and DFIR.
: Maintains a great channel and tweets great insights about DFIR.
: Shares a lot of great tips for DFIR, definitely check her .
: Great tool maker and the man behind #DailyDFIR where he shared daily insights about DFIR
: Shares great tips about Digital Forensics. Definitely check their website
Photo Credits
: Personally, my top-of-mind when i hear the word CTI
: Her keynote talk at ATT&CKcon2.0 was amazing.
: Great CTI feeds source.
: I tried to only include people not organizations otherwise the list would be too long but this is an exception that needs no introductions.
: Cybersecurity latest news.
: Great reports documenting Tactics, Techniques, and Procedures used by APT.
: Dark Web threat intel insights
: Daily tweets and follow ups of the most recent attacks.
Photo Credits
