Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Eggs, Alerts, and Adversaries: Talking with Jose Hernandez from Splunk

hunt.io | blog | #detection-engineering | #interview | #career | #splunk | #threat-research | #detection-as-code

Summary

Splunk's Director of Threat Research Jose Hernandez discusses building detections with Atomic Red Team, detection-as-code pipelines, hiring curious people, and balancing research with farm life.
Published
Collected

original ↗

Related coverage

blog · hunt.io
From Munitions to Malware: Joseph Harrison on Threat Detection & Digital Forensics
An interview with threat lead Joseph Harrison: from Air Force munitions to digital forensics, the discipline behind his detection work, and how he uses JA4 fingerprints to catch what others miss.
blog · hunt.io
Interview with Daniel Plohmann: Malpedia, Malware Analysis, and Research Insights
An interview with Daniel Plohmann: building Malpedia and MCRIT, his path from network simulation to malware research, collaboration in the field, and music as an outlet away from security.
blog · hunt.io
Fast and Curious: Red Teaming, Race Cars, and Hunt.io with Justin Elze
TrustedSec CTO Justin Elze discusses his route into offensive security, what makes red teams work, his favorite tooling, and how he uses Hunt.io and AttackCapture in research.
blog · yeswehack.com
[ITW] Daniel Kalinowski: “Participating in bug bounties improves your skills and increase the overall knowledge.”
A conversation with Polish bug hunter Daniel 'Kalin' Kalinowski on breaking into security from IT ops, why bounties sharpen your skills, and how to stay current on new exploit techniques.
blog · wiz.io
Introducing HoneyBee: How We Automate Honeypot Deployment for Threat Research
Wiz introduces HoneyBee, an open-source tool that auto-generates intentionally misconfigured Docker deployments, with Nuclei validation templates, so researchers can deploy realistic honeypots safely.
blog · hunt.io
The Complete Guide to Hunting Cobalt Strike - Part 4: Operationalizing C2 Feeds with API Automation
Part 4 of the Cobalt Strike series: automating the C2 feed via API—normalizing indicators into core, network and endpoint outputs for SIEM, IDS/EDR and sandbox pipelines.
back