Digital Defense Library — Vol. IV

Detection, Threat Hunting, and Forensics for the Practitioner

Digital Defense Library

Vol IV teaches you to actually use the logs Vol III taught you to collect. Detection engineering, endpoint and network forensics, threat hunting workflows, deception, and personal-scale malware triage — the move from passive defense to active investigation. Inside this volume: • Detection engineering with Sigma, YARA, and detection-as-code • Endpoint forensics: osquery, Velociraptor, Sysmon, Plaso, KAPE • Network monitoring: Zeek, Suricata, RITA • Deception with Thinkst canary tokens • Malware triage: VirusTotal, Hybrid Analysis, CyberChef • Memory forensics with Volatility • Threat intelligence integration (MISP, OTX, abuse.ch, CISA KEV) • Reverse engineering foundations: Ghidra, Cutter, dnSpy • Reporting templates and after-action discipline Format: 13-page illustrated PDF with 39 clickable references to canonical sources.

Who it's for: individuals and families who want to protect their accounts, devices, privacy and household, and small and mid-sized business owners and managers who want a clear security baseline and checklists for their teams.