XSS Explained: Stored, Reflected and DOM-Based
Cross-site scripting executes attacker-controlled JavaScript in your users' browsers, inside your origin — which means it inherits every permission your own code has.
Read more
Insights
The TechBiz blog
Research, write-ups, and practical guidance from the team — straight from the field.
SIEM vs EDR vs XDR: What Each Actually Does
Three acronyms, three genuinely different jobs — and a great deal of marketing that blurs the boundaries. Here is what each one is really…
Read more
Detection Engineering: Turning Telemetry Into Alerts That Matter
Buying a detection platform is the easy part. Detection engineering is the ongoing discipline that decides whether it produces useful alerts or unusable noise.
Read more
MITRE ATT&CK for Defenders: Using It Without Drowning In It
ATT&CK is the most useful defensive resource of the last decade — and the most commonly misused. It is a map of adversary behaviour,…
Read more
Threat Hunting: How to Start Without a Huge Team
Threat hunting is not staring at dashboards hoping something looks odd. It is a structured, hypothesis-driven search for the activity your alerting already failed…
Read more
The Log Sources Every SOC Actually Needs
Detection failures are usually collection failures. Before buying more detection, find out what your environment is not telling you at all.
Read more