About this site
Heritage note and where to reach the editor.
menasec.net was the home of MENASEC from 2019 to 2023, an applied-security blog written by someone else, mostly detection-engineering and threat-hunting writeups. That blog stopped updating a couple of years ago.
The site is back in 2026, under different people. Same beat — detection, hunting, blue-team stuff — but a new team, no overlap with the original writer, no republished posts. The earlier work stays at the Internet Archive.
Some of the old URL paths still exist here so external links don't break. Where one of those paths is live, the post sitting on it is new writing, looking at the same technique now in 2026 — what's still relevant, what isn't. Not a reproduction.
If you're the person who ran MENASEC before and you want anything changed in how this site references the older work, drop a line at [email protected]. Same address for tips and corrections.
What this is
A detection-engineering blog by a working blue-teamer. Specific telemetry, specific rules, specific false-positive profiles, the test environments the rules actually ran in. The stuff that lands on your SOC shift Monday morning.
Posts
Posts come out under MENASEC. No individual author page, no author names; one voice, one site. Easier that way.