Blue Team · 24 articles
Blue Team
SOC, detection engineering, threat hunting, IR, forensics, malware analysis.
Blue Team
Volatility Memory Forensics: A Walkthrough for IR Teams
Volatility 3 workflow for incident response — memory capture (WinPmem, AVML), high-leverage plugins (pstree, netscan, malfind, hashdump, lsadump), real-world analysis pattern, anonymised…
Blue TeamYARA Rules: Writing Detection Logic That Works
YARA syntax, effective rule patterns (combining weak signals, file-format anchors, PE module), public rule sources (signature-base, SigmaHQ), deployment across endpoint EDR, email…
Blue TeamRecent Ransomware Groups Targeting Indian SaaS in 2026
Active ransomware groups hitting Indian organisations — RansomHub, Akira, Play / 8base / BlackSuit. Common kill chain (initial access via VPN/RDP, Cobalt…
Blue Team7 SIEM Rules That Actually Catch Lateral Movement (Splunk, Elastic, Sigma)
Average dwell time before detection in Indian enterprise environments: 14 to 42 days, mostly spent on lateral movement. Seven specific, tunable SIEM…