attack-surface-managementasmexternal attack surface+2
What Is Attack Surface Management? A Practical Guide for Security Teams
May 8, 202612 min read
Security Research & Threat Intelligence
Research
In-depth analysis of threats, hands-on lab testing, detection engineering, and security tooling — by a practitioner, for practitioners.
Page 2 of 3
phishtool alternativephishing email analysis tool comparisonphishtool vs, email forensics tool
PhishTool vs DFIR Platform: Which Email Analysis Tool Fits Your Workflow?
May 1, 20268 min read
yaraDetection Engineeringmalware-analysis+1
YARA Rules Tutorial: Writing Detection Rules from Scratch
Apr 25, 202611 min read
Threat IntelligenceiocIOC Enrichment+3
IOC Enrichment Explained: Why Multi-Source Threat Intelligence Matters
Apr 22, 202610 min read
SplunkIOC EnrichmentCustom Search Command+3
DFIR Platform + Splunk: IOC Enrichment via Custom Search Commands
Build a Splunk custom search command that enriches IOCs via DFIR Platform API. Includes Python code, commands.conf configuration, packaging as a Splunk app, and example SPL queries.
Apr 14, 202611 min read
WazuhThreat IntelligenceAlert Enrichment+4
DFIR Platform + Wazuh: Real-Time Alert Enrichment
Integrate DFIR Platform's IOC enrichment API with Wazuh for real-time alert enrichment. Includes integratord configuration, active response scripts, and example alert workflows for SOC teams.
Apr 13, 202610 min read
TheHiveIOC EnrichmentCortex+3
DFIR Platform + TheHive: Automated IOC Enrichment for Case Management
Integrate DFIR Platform's multi-source IOC enrichment API with TheHive as a Cortex analyzer. Python code examples, architecture walkthrough, and step-by-step setup for SOC teams.
Apr 12, 202611 min read
DFIRincident-responseforensics+2
DFIR Investigation Steps: From Alert to Report
A practical walkthrough of digital forensics investigation steps for SOC analysts — covering detection, containment, eradication, recovery, and reporting based on the NIST SP 800-61 framework.
Apr 11, 202611 min read
exposure-scannerattack-surface-managementapi+1
External Attack Surface Scanner API: Map Your Domain's Exposure in One Call
Learn how an exposure scanner API aggregates 11 intelligence providers—Shodan, SecurityTrails, Criminal IP, and more—into a single API call with a 0–100 risk score. See how DFIR Lab's attack surface management tool compares in cost and capability.
Apr 9, 202610 min read
IOC EnrichmentThreat Intelligenceapi+1
VirusTotal API Alternative: Cheaper Multi-Source IOC Enrichment for Security Teams
VirusTotal is the industry standard for IOC enrichment, but its rate limits and enterprise pricing leave small and mid-size teams behind. Here's how DFIR Platform compares as a VirusTotal API alternative for SOC analysts and MSSPs.
Apr 8, 20269 min read
email-securityspfdkim+3
Email Authentication: SPF, DKIM, and DMARC Explained Simply
A technical guide to SPF, DKIM, and DMARC explained for IT administrators and security analysts. Learn how email authentication works, common misconfigurations, and how to verify your domain.
Apr 7, 202613 min read
phishingapiemail-security+2
Free Phishing Email Analysis API for Developers
Learn how to integrate a phishing email analysis API into your security automation stack. Free tier available — 100 credits/month, no credit card required.
Apr 5, 202610 min read
Stay ahead of emerging threats
Subscribe to receive curated threat intelligence briefings — CVEs, malware trends, and MITRE ATT&CK insights delivered straight to your inbox.
No spam, everUnsubscribe anytimeFree forever