February 23, 2026
2分で読めますExperts will explain the setting conditions and "three principles" to ensure that serious incidents are not overlooked regarding automatic closing of alerts, which is an issue in SOC operations. The secrets of safe automation design, such as the importance of Severity limited and logging and weekly reviews to prevent accidents, are now available. Dramatically improve your own operations. ｜Colorkrew Security
January 23, 20266分で読めますOSINT Explains Admin Page Identification and SQL Injection Attack Flow, WAF Evasion Methods, Detection Methods, and Defense-in-Depth Practices|Colorkrew Security
January 22, 20264分で読めますPractical Explanation of Log Selection Concepts Important in SIEM Implementation from the Perspective of Priority and Cost of Authentication, EDR, Network, and Cloud Logs|Colorkrew Security
January 21, 20264分で読めますExplains the purpose, scenario design, system building, and specific methods of ransomware attack exercises led by CSIRT. Practical Security Training to Enhance Detection and Response|Colorkrew Security
January 19, 20264分で読めますExplaining how Defender for Identity detects lateral deployment and privilege escalation attacks targeting Active Directory, how it differs from EDR and SIEM, and how it can be used in SOC operations|Colorkrew Security
December 26, 20254分で読めますExplains the threat of new malware PROMPTFLUX and PROMPTSTEAL, which exploit generative AI such as Gemini to autonomously mutate and generate instructions. Organize attack methods and practical countermeasures based on GTIG reports|Colorkrew Security
December 23, 20253分で読めますWe will explain the basics of cyber threat intelligence (CTI), implementation procedures, and how to use it in SOC and SIEM. A practical guide to anticipating attacks and reducing risk for your organization. ｜Colorkrew Security
![[January 2026 Edition] Summary of vulnerabilities to be addressed now|React, n8n, MongoDB](https://ckmediastgstr.blob.core.windows.net/uploads/post_81_00_b35848e9ea.jpg)
December 21, 20254分で読めますExplain the vulnerabilities that should be addressed as a priority in January 2026. Based on CVE information related to React, n8n, and MongoDB, we organize the scope of impact and specific countermeasure points, and use them to determine priorities in SOC operations|Colorkrew Security
December 21, 20253分で読めますThis section covers an overview of NIST CSF 2.0, implementation procedures, and practical points to enhance security maturity. A Guide for Enterprises Considering Strengthening Governance and SOC Alignment|Colorkrew Security
December 19, 20253分で読めますWhat does Zero Trust do? From the essence of the concept to MFA, device management, and data protection, we will explain the practical points that can be started in the field|Colorkrew Security
![[Can be used in the field] MITRE ATT&CK Utilization Guide! Strengthen your defenses by gaining visibility into attacker modus operandi](https://ckmediastgstr.blob.core.windows.net/uploads/post_78_00_9a72b6cdf5.jpg)
December 8, 20253分で読めますIt explains in an easy-to-understand manner from the basics of MITRE ATT&CK to its structure, how to view the matrix, and how to use it in the field. This is a practical guide to help you analyze gaps and strengthen countermeasures|Colorkrew Security
December 7, 20253分で読めますWill AI replace SOC? In this article, we will sort out the areas of AI's strengths and weaknesses, explain the differences from the judgment work that SOCs are responsible for, and the areas that can be strengthened by using AI|Colorkrew Security
