This site uses cookies to serve ads via Google AdSense and to analyse site usage. By continuing to use this site, you consent to our use of cookies. Privacy Policy
Enter a red team finding or penetration test technique and get the corresponding blue team detection: which SIEM use case should cover it, which Event IDs are relevant, the detection query, and what was likely missing if the tester wasn't caught.
We use cookies to remember your preferences. No advertising or tracking cookies. Privacy Policy