SOC//PRAMOD │ SHIFT: NIGHT UTC: --:--:--

HOW I WORK

The reasoning behind the work: where I make an adversary hurt, where my detection coverage actually sits, the vocabulary of the defence, and a shell you can interrogate.

PYRAMID OF PAIN

WHERE I MAKE AN ADVERSARY HURT
PYRAMID OF PAINWHERE I MAKE AN ADVERSARY HURT — SELECT A TIER

ATT&CK COVERAGE MATRIX

ENTERPRISE
Initial AccessTA0001
ExecutionTA0002
PersistenceTA0003
Priv EscalationTA0004
Defense EvasionTA0005
Credential AccessTA0006
DiscoveryTA0007
Lateral MovementTA0008
CollectionTA0009
Command & ControlTA0011
ExfiltrationTA0010
ImpactTA0040
Rules authored, incidents worked Regular investigation & tuning Working familiarity

BLUE TEAM LEXICON

THE VOCABULARY OF THE DEFENCE — CLICK A TERM

ANALYST SHELL

TYPE 'help' — OR CLICK A COMMAND BELOW