GUIDES
Reference material, maintained like software.
Versioned, reviewed, signed. Four hubs covering the disciplines of threat management, written to be readable on your first week and useful on your thousandth.
Maintained by practitioners
- Jermain Njemanze
VP of Solution Engineering, Filigran
LatestYour SOC Doesn’t Have a Data Problem. It Has a Coordination Problem.
- Einat Argon
Manager of Customer Success Management, Filigran
- Damian Skeeles
Senior Solution Engineer, Filigran
- Ray Huang
Senior Solution Engineer, Filigran
Know the Threat
THREAT INTELLIGENCE & ANALYSIS
Collection, structured analysis, STIX and ATT&CK mapping, actor profiling: intel products people actually read.
Detect & Hunt
DETECTION ENGINEERING & HUNTING
Sigma/YARA/KQL rule writing, detection-as-code, hypothesis-driven hunting, ATT&CK coverage and tuning.
Test & Validate
ADVERSARY SIMULATION & EXPOSURE
BAS, purple teaming, atomic testing, tabletops and the broader CTEM story: where "do we actually stop this?" gets answered.
Respond & Improve
IR, DFIR & OPERATIONS
IR playbooks, forensics fundamentals, post-incident review: feeding lessons back into intel and detections.
Latest
- Respond & ImproveWhat Is Incident Response?Samuel Hassine, CEO and co-founder · 8 min · reviewed Aug 25, 2026
- Know the ThreatWhat Is Cyber Threat Intelligence?Damian Skeeles, Senior Solution Engineer · 8 min · reviewed Aug 25, 2026
- Detect & HuntThe (Definitive) List of Open Source SIEM Platforms Worth EvaluatingSamuel Hassine, CEO and co-founder · 7 min · reviewed Aug 25, 2026
- Test & ValidateWhat Is Automated Red Teaming?Samuel Hassine, CEO and co-founder · 9 min · reviewed Aug 25, 2026