Cyber Security Blue Team: Incident Responder Series – Part 1

In the IR processes, we will develop rules for each MITRE ATT&CK TTP in Suricata, Sysmon, and Splunk and write examples.