Blue Team

🚨 Most SOC teams do not have a data problem. They have a decision-speed problem. Modern SIEM platforms already collect enormous volumes of telemetry from endpoints, identities, networks, cloud environments, and applications. The challenge is turning that data into a reliable answer before an attacker reaches the next stage of the attack. That is where AI is beginning to change security operations. @BlueTeamKit

PLM-NIDS: A Protocol-Language Model for Network Intrusion Detection from Raw Packet Sequences Using RWKV State-Space Models ]-> https://github.com/shiva2vk/PLM-NIDS // The RWKV backbone’s O(T) recurrent inference enables per-packet streaming without flow buffering, making PLM-NIDS operationally viable at line rate. Because it reads only IP/TCP/UDP headers, it is inherently encryption-agnostic: TLS 1.3, QUIC, and future encrypted protocols are handled transparently @BlueTeamKit

PowerShell Hunting & Detection @BlueTeamKit

Splunk Use Cases @BlueTeamKit