Encore compiles public exploit proofs into threat-hunting rules
Across 45 CVEs, Encore found 43 without reading logs and raised alerts on two wrong CVE pairs.
Stories per day · 30 days
Relatedatomic-red-team1detection-engineering1detection-rules1proof-of-concept1rag1siem1splunk1threat-detection1threat-hunting1threat-intelligence1yara1
3 stories, newest first · one card per story
Stories tagged #sigma
Paper proposes LLM 'adversary brains' as logical threat signatures
The design turns threat reports into testable hypotheses that can match campaigns and suggest new indicators such as C2 domains.
ARMS mutates detection rules for related attack technique variants
Authors say nearly all generated Sigma variants compiled to SIEM queries and about 92% still caught the original behavior.