!blueteam@infosec.pub

Blue Teamers are the first (and sometimes last) line of defense in the ongoing cyber war. This place is to chat out detection strategies, complain about SIEMs, compare SOAR playbooks, or post mean memes about the Red Team.

Blue Team

Security Control Frameworks

Vulnerability Assessments

Edge history forensics – part 2 (downloads and search)(safecontrols.blog)

ALFA: Automated Audit Log Forensic Analysis for Google Workspace(github.com)

Hacktivists with exaggerated claims again?(www.bleepingcomputer.com)

ISO27001/27002 - Am I missing something?

Excel as log analysis tool?(www.mandiant.com)

Modern Attack Methods You Should Know(archive.ph)

Container security fundamentals series(securitylabs.datadoghq.com)

Enterprise Purple Teaming: an Exploratory Qualitative Study(github.com)

geo_info_from_ip_address() - Azure Data Explorer(learn.microsoft.com)

Reports from MSSP's - what do people actually care about?

NVD damage continued(daniel.haxx.se)

".Zip" top-level domains draw potential for information leaks(blog.talosintelligence.com)

Red team posted their version(github.com)

What does your security organization look like?

Introduce yourself!

Second MOVEit Vulnerability

Blue Team

!blueteam@infosec.pub

Community stats

Community moderators

Infosec.Pub