Mlab Blog

Threat intel, DFIR & security notes

Deep-dives, tooling write-ups and transparent product updates from the Mlab team. 0 articles so far.

All0 Announcements1 Crypto1 Threat Hunting1 Threat Intelligence2

IOC Analysis Step-by-Step: A Complete Guide for Threat Hunters

A complete, practitioner-focused guide to Indicator of Compromise analysis: from IP addresses and domains to file hashes and network artifacts. Includes real-world examples, tooling, automation scripts, and MITRE ATT&CK mapping.

#ioc#threat-hunting#dfir

April 17, 2026 · 20 min

Threat Hunting

YARA Rules: The Complete Guide for Threat Hunters

Master YARA from zero to hero: full syntax, advanced conditions, modules, optimization and real-world examples to detect malware, ransomware and APTs. A no-nonsense technical guide.

#yara#malware#threat-hunting

April 17, 2026 · 18 min

Announcements

Welcome to the Mlab Blog

Why we launched this blog and what you can expect: threat intelligence deep-dives, DFIR notes, product changelogs and short, actionable cybersecurity reads.

#launch#announcement#mlab

April 15, 2026 · 2 min

Threat Intelligence

Understanding IOCs: A Practical Primer

A grounded introduction to Indicators of Compromise — what they are, where they break, and how to actually use them inside a SOC workflow without drowning in false positives.

#ioc#threat intelligence#soc

April 10, 2026 · 5 min

Crypto

MD5 vs SHA-256: Which Hash Should You Use?

MD5 is still everywhere. SHA-256 is the default you should reach for. Here is when each one is acceptable, and when using MD5 is an actual security bug.

#hashing#md5#sha256

April 5, 2026 · 4 min

Navigation