Webinar Series - Session 2/3 - Grey Noise Detection Engineering: Under The Hood
Summary: GreyNoise published the second session of a three-part webinar series on its detection engineering, dated January 17, 2024, covering how a tag is built. The session walks through building a benign actor tag, detection engineering a malicious CVE into a malicious activity tag, and the decision to flip the "malicious" switch on a tag.
What's compelling: The final step described is a human judgment call - flipping the "malicious" switch on a tag - which means the classification a security team acts on rests on someone's decision to label an actor or CVE as hostile.
Read the original at GreyNoise Blog ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026