Carry implemented work into the validation lifecycle

I built selected detections and carried out hunting and hardening work while keeping the broader coverage review, ownership and validation work in the backlog. Purple-team validation remained a planned next step for assessing the resulting detections against the relevant attack behaviour.

MITRE ATT&CK Detection use-case development Attack-path analysis Telemetry requirements Security risk prioritisation KQL Microsoft Defender XDR SQL Server security SMB enumeration detection Credential exposure hunting Threat hunting Active Directory NTLM authentication

Return to the full story ←

Carry implemented work into the validation lifecycle

Viewed history

Ask about my work.