Results for “sybil-detection”

Analyzes TiDB cluster topology, slow queries, hot regions, and SQL performance using read-only database and API queries.

Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks by monitoring process creation, command-line arguments, and parent-child relationships.

Detect APT lateral movement by chaining Windows authentication events, process execution telemetry, and network connection logs across hosts using Splunk SPL and Sigma rule format.

Projeta métricas, logs, traces, dashboards, alertas e SLO com Prometheus, Grafana, Loki, Tempo, Mimir, Zabbix e Alertmanager, incluindo consultas PromQL e boas práticas de alertas.

Detect IBD-style Distribution Days for QQQ/SPY, track 25-session expiration and 5% invalidation, count d5/d15/d25 clusters, classify market risk, and emit TQQQ/QQQ exposure recommendations.

Design, implement, test, and maintain SIEM detection rules mapped to MITRE ATT&CK across Splunk, Elastic, and Sentinel platforms.

Clusters raw detection tickets into reusable edge concepts with thesis, invalidation signals, and strategy playbooks before strategy design.