Follow @cg on Micro.blog.
Various tools for the LogRhythm SIEM including custom MPE rules and Smart Reponse plug-ins.
Various tools for Carbon Black Defense
Home of The Poor Man’s Incident Response Toolkit (PMIRT).