@prakhardubey
Learning CTI, writing what I discover.
Nothing here yet.
Nothing here yet.
5d ago · 16 min read · When a SIEM alert fires with a suspicious IP, most analysts do one of two things. They check if it's blocked. They move on. The analysts who consistently produce better intelligence do something diffe
Join discussion