SOC Archives

Practitioner reference cover · Indicators of Compromise and Threat Intelligence · 6 framework cards: Pyramid of Pain, IOC Standards (STIX TAXII OpenIOC MISP), Pivoting Tradecraft (passive DNS WHOIS JARM JA4 cert), Diamond Model, TI Lifecycle + F3EAD, Detection Engineering (Sigma YARA ATT&CK Navigator SOAR) · framework chip strip: Pyramid of Pain · Diamond Model · Kill Chain · ATT&CK · STIX TAXII · Sigma YARA · F3EAD

Indicators of Compromise and Threat Intelligence: A Practitioner Reference

PRACTITIONER REFERENCE · THREAT INTELLIGENCE & DETECTION ENGINEERING · v2 A working analyst's reference. Twenty sections, sixteen frameworks — the...

HACKFORLAB Weekly Threat Advisory · June 15-21, 2026 · 55,480 indicator observations across 89 adversary clusters · radar showing intelligence graph with multi-pivot locked cluster · Rhysida-Interlock 219 IOCs, ClickFix 215 IOCs, JetBrains plugin supply chain attack, AI platform abuse, APT37 and UNC6508 active

Weekly Threat Advisory: Cluster Analysis & Top IOCs, June 15 – 21, 2026

WEEKLY THREAT ADVISORY · ADVISORY 026-25 · JUNE 15 – 21, 2026 The catalogue produced 55,480 indicator observations across 89...

The AWS Threat Hunting Library — 7 hunts every cloud SOC should run · HackForLab AWS Threat Hunting series hub

The Complete AWS Threat Hunting Library: 27 Cloud Hunts, 7 Flagship Playbooks, and the Full Archive (2026)

⚙ AWS THREAT HUNTING · CORNERSTONE LIBRARY · 2026 EDITION The Amazon Web Services attack surface is broader than most...

AWS Organizations Compromise: Hunting the Multi-Account Federation Attack

AWS THREAT HUNTING · PART 07 OF 07 · 2026 An attacker who compromises the right role in your AWS...

Athena and S3 Data Lake Exfiltration: Hunting the SQL-Powered Data Heist

AWS THREAT HUNTING · PART 06 OF 07 · 2026 If your most valuable data lives in S3 and your...

HACKFORALB successfully completed threat hunting for following attack…

DNS Reconnaissance, Domain Generation Algorithm (DGA), Robotic Pattern Detection, DNS Shadowing , Fast Flux DNS , Beaconing , Phishing , APT , Lateral Movement , Browser Compromised , DNS Amplification , DNS Tunneling , Skeleton key Malware , Advance Persistent Threats, Low and Slow attacks , DoS, Watering Hole Attack Detection, Weh Shell , DNS Water Torch Attack , Intrusion Detection, Cookie visibility and theft, User login Session hijacking, Broken Trust, Pass the Hash, Session fixation, Honey Token account suspicious activities, Data Snooping / Data aggregation, Cross Channel Data Egress, Banking fraud detection, Chopper Web shell

Tag: SOC

Attack Hunting Using AWS VPC Flow Logs

Recent Posts

Hackforlab Category

FaceBook Page

SIEM | UEBA

GridView List Posts Widget

Indicators of Compromise and Threat Intelligence: A Practitioner Reference

Weekly Threat Advisory: Cluster Analysis & Top IOCs, June 15 – 21, 2026

The Complete AWS Threat Hunting Library: 27 Cloud Hunts, 7 Flagship Playbooks, and the Full Archive (2026)

AWS Organizations Compromise: Hunting the Multi-Account Federation Attack

Athena and S3 Data Lake Exfiltration: Hunting the SQL-Powered Data Heist

Cyber Threat Attacks / Hunting

Cyber Deception

FOLLOW US

CYBER THREAT CATEGORIES

Top Cyber Security Articles

Threat Hunting Scenarios

Attack Hunting Using AWS VPC Flow Logs

Recent Posts

Hackforlab Category

SOCIAL HACKFORLAB

FaceBook Page

SIEM | UEBA

GridView List Posts Widget

Indicators of Compromise and Threat Intelligence: A Practitioner Reference

Weekly Threat Advisory: Cluster Analysis & Top IOCs, June 15 – 21, 2026

The Complete AWS Threat Hunting Library: 27 Cloud Hunts, 7 Flagship Playbooks, and the Full Archive (2026)

AWS Organizations Compromise: Hunting the Multi-Account Federation Attack

Athena and S3 Data Lake Exfiltration: Hunting the SQL-Powered Data Heist

Cyber Threat Attacks / Hunting

Cyber Deception