iWHiTEHAT Field Journal

The breadth of global threat coverage we draw from

The breadth of global threat coverage we draw from

Tuning Splunk: cutting alert volume without losing signal

Everything you need to know about MITRE ATT&CK coverage scoring

Tuning Splunk: cutting alert volume without losing signal

Everything you need to know about MITRE ATT&CK coverage scoring

Tuning Splunk: cutting alert volume without losing signal

When the page goes off: an incident response retrospective

When the page goes off: an incident response retrospective

Compliance evidence: how to organize the evidence room

Compliance evidence: how to organize the evidence room

What does a threat hunter actually do, day to day?

Welcome to the iWHiTEHAT field journal

What does a threat hunter actually do, day to day?

Standing up a fresh SOC: the first 90 days

How we staff a security program that scales beyond a single team

Standing up a fresh SOC: the first 90 days