Medium

Alex Teixeira

In

Detect FYI

by

Alex Teixeira

·

Jun 23

Testing AI Threat Hunting against Real-World KQL: A Side-by-Side Test

A real-world experiment revealing where AI excels and where it still struggles. Here’s an honest breakdown of the gap.

Testing AI Threat Hunting against Real-World KQL: A Side-by-Side Test

In

Detect FYI

by

Alex Teixeira

·

Feb 23

Whose endpoint is this… kali?!

The thought process to uncover post-exploitation activity and rogue devices in enterprise networks

Whose endpoint is this… kali?!

In

Detect FYI

by

Alex Teixeira

·

Jan 29

Data Prevalence: The Game Changer in Threat Detection & IR

Building compound, high-fidelity detection available for all

Data Prevalence: The Game Changer in Threat Detection & IR

In

Detect FYI

by

Alex Teixeira

·

Jan 20

Introducing > PowerShell.Exposed

Community-driven pattern-based detection indicators

Introducing > PowerShell.Exposed

In

Detect FYI

by

Alex Teixeira

·

Dec 10, 2025

Rethinking Benign Alerts: A New Perspective for Detection Engineering

Breaking down the false TP/FP dichotomy in the SOC

Rethinking Benign Alerts: A New Perspective for Detection Engineering

In

Detect FYI

by

Alex Teixeira

·

Nov 17, 2025

Introducing the DRAPE Index: How to measure (in)success in a Threat Detection practice?

Going Beyond the Cosmetics to Assess Detection Quality

Introducing the DRAPE Index: How to measure (in)success in a Threat Detection practice?

In

Detect FYI

by

Alex Teixeira

·

Aug 25, 2025

Malicious Encoded PowerShell: Detecting, Decoding & Modeling

The challenges and insights from dealing with this PS one-liner

Malicious Encoded PowerShell: Detecting, Decoding & Modeling

In

Detect FYI

by

Alex Teixeira

·

May 1, 2025

The Detection Opportunity Cost

What should drive picking one detection idea over another?

The Detection Opportunity Cost

In

Detect FYI

by

Alex Teixeira

·

Mar 26, 2025

Becoming a Detection Engineering Contractor, Part II— The Preparation

You want to become a contractor or an independent consultant in the Detection Engineering (DE) space? This series is for you.

Becoming a Detection Engineering Contractor, Part II— The Preparation

In

Detect FYI

by

Alex Teixeira

·

Feb 25, 2025

Threat Hunting step-by-step: Collecting Web Shells 🐚 using Ephemeral Baselines

Turning a KQL hunting query into a Defender detection rule to spot unusual web server processes using simple statistics.

Threat Hunting step-by-step: Collecting Web Shells 🐚 using Ephemeral Baselines

Alex Teixeira

Alex Teixeira

Friend of Medium

I design and build detection and SIEM/EDR/XDR content for Enterprise #SecOps teams #DetectionEngineering http://opstune.com

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech