Category: TTP

Detection‑as‑Code (DaC) Adoption Rising — SOCs Embedding Detection Logic into CI/CD‑Style Pipelines

Shuvro

Reading Time: 3 minutesDetection‑as‑Code (DaC) is moving from niche practice to mainstream SOC engineering discipline. By embedding detection logic into CI/CD‑style pipelines, organizations are achieving faster deployment cycles, higher detection accuracy, and measurable reductions in false positives.

SOAR Playbook for Threat Hunting

Shuvro

Reading Time: 6 minutesThis blueprint outlines the integration of Security Orchestration, Automation, and Response (SOAR) with proactive Threat Hunting. This synergy shifts organizations from reactive to proactive defense, enhancing cybersecurity posture, improving Security Operations Center (SOC) efficiency, and accelerating response times to advanced threats. Key recommendations include phased implementation, KPI-driven measurement, continuous improvement, and investment in human capital.

SOAR Playbook for Cryptojacking

Shuvro

Reading Time: 8 minutesThis blueprint outlines a comprehensive Security Orchestration, Automation, and Response (SOAR) playbook to combat cryptojacking—the unauthorized use of computing resources for cryptocurrency mining. Cryptojacking poses significant financial, operational, and reputational risks by silently consuming CPU cycles, increasing power costs, degrading system performance, and introducing hidden vulnerabilities.

SOAR Playbook for Ransomware

Shuvro

Reading Time: 4 minutesStatus: Final Blueprint Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: March 15, 2025 Location: Dhaka, Bangladesh Version: 1.0 Table of Contents 1. Executive Summary This “SOAR Playbook for Ransomware” offers a comprehensive blueprint for Read More …

Ransomware Recovery Plan

Shuvro

Reading Time: 5 minutesThis blueprint provides a comprehensive framework for preparing for, responding to, and recovering from ransomware attacks. It emphasizes cyber resilience as a strategic imperative, integrating proactive defense, swift incident response, and continuous improvement to minimize impact and ensure business continuity.

Ransomware Defense & Remediation Plan

Shuvro

Reading Time: 6 minutesStatus: Final Blueprint Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: March 29, 2025 Location: Dhaka, Bangladesh Version: 1.0 1. Executive Summary Ransomware has evolved into a sophisticated, multi-stage cyber threat causing significant financial, operational, Read More …

PASTA – Process for Attack Simulation and Threat Analysis in the SOC

Shuvro

Reading Time: 4 minutesThis document outlines the PASTA-SOC framework, a structured methodology to evolve a Security Operations Center (SOC) from a reactive to a proactive, threat-informed defense model. It operationalizes the seven stages of the Process for Attack Simulation and Threat Analysis (PASTA) by integrating its business-centric principles with the tactical capabilities of modern security technologies, primarily Breach and Attack Simulation (BAS), Threat Intelligence Platforms (TIPs), and Security Orchestration, Automation, and Response (SOAR).

Data Collection Methods for CTI (Cyber Threat Intelligence)

Shuvro

Reading Time: 3 minutesAuthor: Shahab Al Yamin Chawdhury Date: March 4, 2024 Version: 1.0 Executive Summary This blueprint provides a strategic methodology for designing and operationalizing a world-class Cyber Threat Intelligence (CTI) data collection program. It moves beyond simply listing sources to establish Read More …