/series/detection-engineering/ Recent content in Detection Engineering on Hugo -- gohugo.io en-us Fri, 07 Aug 2026 15:08:49 -0400 /posts/detection_engineering/sigma_rules/ Fri, 07 Aug 2026 15:08:49 -0400 /posts/detection_engineering/sigma_rules/ Introduction Hello everyone and welcome back to another post from yours truly. Today we’re going to be doing something slightly different actually. I’ve been looking more into detection engineering recently and been wanting to get better at writing detection rules in different formats and whatnot. So today we’re going to be actually looking at a threat intelligence post from Cisco Talos covering some malware from the Chaos ransomware group. Specifically, their msaRAT malware that uses the browser for its C2 communications.