Threat Detection Labs

Threat Detection LabsDetection engineering, threat intelligence, and cybersecurity research.https://threatdetectionlabs.com/en-usWriting Your First SIGMA Detection Rulehttps://threatdetectionlabs.com/posts/writing-your-first-sigma-rule/https://threatdetectionlabs.com/posts/writing-your-first-sigma-rule/A step-by-step guide to creating SIGMA rules for detecting suspicious process execution on Windows endpoints.Sat, 16 May 2026 00:00:00 GMTdetection-engineeringsigmadetectionwindowspowershellKQL for Threat Hunting: Essential Queries Every Analyst Should Knowhttps://threatdetectionlabs.com/posts/kql-threat-hunting-basics/https://threatdetectionlabs.com/posts/kql-threat-hunting-basics/Learn the essential KQL queries for threat hunting in Microsoft Sentinel and Defender.Thu, 14 May 2026 00:00:00 GMTthreat-intelkqlhuntingsentinelazureMITRE ATT&CK for Detection Engineers: A Practical Guidehttps://threatdetectionlabs.com/posts/understanding-mitre-attack/https://threatdetectionlabs.com/posts/understanding-mitre-attack/How to use the MITRE ATT&CK framework to build structured detection coverage for your organization.Tue, 12 May 2026 00:00:00 GMTtutorialsdetectionhunting