Threat intel, DFIR
and security notes
Deep-dives, investigation write-ups, tooling notes and transparent product updates from the Mlab team. Written for analysts who want the indicators, the method and the fix.
Articles
49
Categories
9
Tags
142
Latest
July 10, 2026
#beginners
Newest first
Threat Hunting
Your First Threat Hunt: A Hypothesis-Driven Walkthrough
A start-to-finish first threat hunt for beginners: pick a hypothesis, gather data, write queries, separate signal from admin noise, document findings, and turn results into a durable detection. No expensive tooling required.
7 min
Fundamentals
So You Want to Be a SOC Analyst: A Realistic Starting Roadmap
What the job actually looks like, the four skills that matter more than any certification, home-lab ideas that cost nothing, and where the role leads after year two.
6 min
Engineering
A 421M decision model in front of our MCP output? Not yet
Studies, benchmarks and build notes. Method first, numbers included, losses too.
Read the latest note