Add the feed to any reader: Feedly, Inoreader, NetNewsWire. New reports appear the moment they publish.
Three feeds, so a reader can take any without the others: the reports, the detection library on its own (a new page of Sigma, YARA and Suricata rules per campaign), and The Wire on its own (the hourly headlines from other publishers, links only). The reports and detections feeds are also JSON Feed: /feed.json and /hunting-detections/feed.json.
A direct email when a new report drops. No marketing, no noise, just new intelligence in your inbox.
Follow or connect with Joseph Harrison. Reports are posted and discussed there, alongside shorter threat-intelligence notes between publications. Open to connecting with defenders, researchers, and security teams.
Follow @Hunters_Ledger for report announcements and shorter-form threat intelligence notes between full publications.
Original malware analysis & campaign investigations.
Sigma, YARA & Suricata rules ready for your environment.
Structured indicator packages for direct SIEM / EDR ingest.
All content is from original research. Publication frequency varies with active investigations, typically several reports per month.