https://www.hackthebox.com/rss/blog/blue-teaming All the latest news and insights about cybersecurity from Hack The Box. Hacking trends, insights, interviews, stories, and much more en https://www.hackthebox.com/images/landingv3/logo-htb-blog.svg https://www.hackthebox.com/rss/blog/blue-teaming https://www.hackthebox.com/blog/measuring-soc-dfir-resilience-with-threat-range SOC burnout is real. See how HTB’s Threat Range rebuilds resilience and delivers measurable value through realistic, data-driven blue team simulations. ]]> Blue Teaming Thu, 06 Nov 2025 08:30:00 +0000 https://www.hackthebox.com/blog/measuring-soc-dfir-resilience-with-threat-range https://www.hackthebox.com/blog/soc-dfir-resilience-metrics-reporting Show measurable cyber readiness to boards and regulators. TRI gives CISOs clear insights into SOC and DFIR performance under real-world attacks. ]]> Blue Teaming Wed, 29 Oct 2025 08:31:00 +0000 https://www.hackthebox.com/blog/soc-dfir-resilience-metrics-reporting https://www.hackthebox.com/blog/blue-team-defensive-ctf-holmes-2025-recap HTB’s first all-blue Holmes CTF brought 11,000+ defenders together to tackle DFIR, SOC, malware, and threat hunting challenges in a fully immersive investigation. ]]> Blue Teaming Fri, 24 Oct 2025 10:52:00 +0000 https://www.hackthebox.com/blog/blue-team-defensive-ctf-holmes-2025-recap https://www.hackthebox.com/blog/welcome-letsdefend Hack The Box and LetsDefend join forces to create the world’s largest collaborative cybersecurity platform with hands-on labs, SOC simulations, and a unified upskilling experience. ]]> Blue Teaming Tue, 16 Sep 2025 12:58:00 +0000 https://www.hackthebox.com/blog/welcome-letsdefend https://www.hackthebox.com/blog/30-60-90-day-onboarding-plan-SOC-analyst-checklist Your step-by-step guide to building defenders with confidence, clarity, and hands-on SOC Analyst training from day one. ]]> Blue Teaming Tue, 12 Aug 2025 09:34:00 +0000 https://www.hackthebox.com/blog/30-60-90-day-onboarding-plan-SOC-analyst-checklist https://www.hackthebox.com/blog/global-cyber-skills-benchmark-cloud-security-breaches Cloud is the battleground attackers love most. New data from 796 teams shows most organizations aren’t quite ready. How do your defenses measure up? ]]> Blue Teaming Mon, 21 Jul 2025 08:23:00 +0000 https://www.hackthebox.com/blog/global-cyber-skills-benchmark-cloud-security-breaches https://www.hackthebox.com/blog/active-directory-attacks-history-tactics-defenses Explore 25 years of Active Directory attacks—from PtH to ransomware—and learn how defenders can harden networks, stop lateral movement, and prepare with hands-on training. ]]> Blue Teaming Sat, 12 Jul 2025 02:45:00 +0000 https://www.hackthebox.com/blog/active-directory-attacks-history-tactics-defenses https://www.hackthebox.com/blog/llmnr-poisoning-attack-detection Learn how to detect LLMNR poisoning attacks in part three of a special five-part series on critical Active Directory (AD) attack detections & misconfigurations ]]> Blue Teaming Fri, 13 Jun 2025 10:31:00 +0000 https://www.hackthebox.com/blog/llmnr-poisoning-attack-detection https://www.hackthebox.com/blog/anab-accredited-certificate-program An ANAB‑accredited, threat‑informed coursework that prepares cyber defenders for DoD 8140 roles and competencies. Delivering verifiable skills in just 15 weeks. ]]> Blue Teaming Thu, 12 Jun 2025 02:59:00 +0000 https://www.hackthebox.com/blog/anab-accredited-certificate-program https://www.hackthebox.com/blog/smartscreen-logs-evidence-execution CyberJunkie walks us through a new detection technique he uncovered using Windows SmartScreen Debug Event Logs. Follow this step-by-step guide to see how it works. ]]> Blue Teaming Thu, 27 Feb 2025 03:24:00 +0000 https://www.hackthebox.com/blog/smartscreen-logs-evidence-execution