https://1200km.com/ CTI-to-detection research, AdversaryGraph updates, malware analysis, detection engineering, security labs, and analyst tooling by Andrey Pautov. en Sat, 11 Jul 2026 00:00:00 +0000 1440 https://1200km.com/newest-detection-engineering-techniques/ https://1200km.com/newest-detection-engineering-techniques/ Sat, 11 Jul 2026 00:00:00 +0000 Practical detection engineering techniques for validated telemetry, identity, cloud, SaaS, CI/CD, runtime, data lake, and AI-agent environments. https://1200km.com/embedded-systems-hardware-firmware/ https://1200km.com/embedded-systems-hardware-firmware/ Fri, 03 Jul 2026 00:00:00 +0000 Source-verified CTI research on embedded systems, edge appliances, BMC, UEFI, firmware, SOHO routers, OT/IoT devices, and hardware trust boundaries. https://1200km.com/articles/adversarygraph-v2-self-hosted-ai-cti-platform.html https://1200km.com/articles/adversarygraph-v2-self-hosted-ai-cti-platform.html Sun, 07 Jun 2026 00:00:00 +0000 AdversaryGraph capability map for ATT&CK mapping, IOC enrichment, STIX/TAXII/MISP workflows, Sigma/YARA, malware analysis, and asset surface mapping. https://1200km.com/articles/adversarygraph-from-log-to-report-ioc-investigation.html https://1200km.com/articles/adversarygraph-from-log-to-report-ioc-investigation.html Sun, 07 Jun 2026 00:00:00 +0000 A practical AdversaryGraph workflow from firewall and EDR telemetry to IOC extraction, enrichment, relationship graph review, ATT&CK leads, and an AI-assisted report.