4 newsletters, ranked by editorial quality and how recently they published. Looking for something more specific? Search instead.
A practitioner's blog on using LLMs and coding agents in detection engineering, covering query writing, a packaged rule-development workflow, and metrics for maintaining a detection catalog. Posts explain the reasoning behind each design choice and the failures that shaped it.
Magonia Research publishes practical essays for SOC and detection engineers, covering false positive rate math, the Mythos exploit debate, and operationalizing attack frameworks like ATT&CK, the Kill Chain and the Diamond Model. Readers get concrete reasoning from a practitioner with long experience running SOCs and writing detection logic.
Practical, opinionated essays for blue teamers and SOC analysts on alert fatigue, detection design, and the trade-offs of security operations. Readers get concrete frameworks such as alert budgets and commentary on the state of AppSec and defensive strategy.
A security consultant shares observations on Azure and Microsoft 365 security, detection engineering and threat intelligence. Issues cover annual threat trend memos, logging readiness after major breaches, and an intermediate-level cloud security series.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
