FalconForce

FalconForce will join @1ns0mn1h4ck.bsky.social again in February 2027. This training equips you with the tools and frameworks needed to build, maintain, and evolve a proactive security program. Tickets and registration: www.insomnihack.ch/session/a8c0...

We have created KQL hunting queries to get you started figuring out whether you are affected by the latest PHP and certificate vulnerabilities. 👉 github.com/FalconForceT... We want to say thank you to all defenders and responders resolving these issues 🫶

Last weekend, we were at #BalCCon 2k26 conference in Novi Sad, Serbia. Our colleague Nikos Mantas facilitated the workshop “Memory Forensics in the age of EDR”. We had great discussions with the participants. And really enjoyed the ambiance of this event.

Detection performance shouldn’t be buried across alerts and metrics. 📊 In our latest blog, we introduce and open-source #FalconDash - a modular dashboard built to make Microsoft Sentinel detection performance visible, explorable, and easier to tune. 🚀 falconforce.nl/introducing-...

Are you a security professional that works with Microsoft Security solutions? #Yellowhat conference. January 19, Almere, NL. Want a 5-hour hands-on detection-engineering workshop with FalconForce? Add our Advanced Detection Engineering training: yellowhat.live

Historically, offensive and defensive teams have been competitors, eyeballing each other with suspicion. This approach has been suboptimal for cybersecurity. Givan Kolster will highlight his insights into the benefits of purple teaming at #CyberHagen, September 17. Info: www.cyberhagen.com

What if you could leverage Event Tracing for Windows (ETW) to manipulate telemetry data, challenging the trust placed in endpoint detection and response (EDR) tools? 👉 Have a look at our latest blog as presented earlier at Black Hat by @olafhartong.nl: falconforce.nl/in-your-logs...

The next step isn't adding more security tools. It's creating a reliable operating layer that connects alerting, enrichment, automation, and response. That's exactly why we’ve built Sentry Respond. (2/2)

The most mature SOCs don't just add more detections. They engineer. They connect detections to context, prioritization, and response workflows. Detection without response is only half the solution. Sentry Respond closes that gap. (2/2) falconforce.nl/services/blu...

A detection without enrichment, asset context, ownership, or clear next steps forces analysts to spend valuable time collecting it instead of responding. Reducing investigation time is just as important as increasing detection coverage. (1/2)

Automation only creates value when it’s observable, maintainable, and reliable during an incident. That’s the design principle behind FalconForce Sentry Respond: automation should be visible and trusted in analysts’ daily work. Not just automated for automation’s sake. (2/2)

We were sold out, BUT we have received a room upgrade! Additional tickets are now available. Book your ticket before the last price-bump at July 31: blackhat.com/us-26/traini...

For SOC leaders, this is an operational challenge. For CISOs, it’s an assurance question: can we respond at the speed an incident demands, or does it still depend on manual processes that don’t scale under pressure? That’s the gap Sentry Respond is built to close. (2/2)

Incident response has become a timing problem. It’s no longer the first alert that slows SOCs down. It’s the time needed to understand what happened, enrich the incident, correlate signals, and decide on the right response. Manual investigation is becoming the bottleneck. (1/2)

By popular demand, FalconForce is bringing its Advanced Defensive Engineering in the Enterprise training home! We will provide the training as an independent event in September 2026 in Utrecht, the Netherlands. Registration and information: www.tickettailor.com/events/falco...

Will we see you in Las Vegas? blackhat.com/us-26/traini... Our advanced defensive engineering training will teach you about the detection engineering lifecycle, SOC automation with playbooks and AI-based agentic workflows.

Will we see you in Las Vegas? blackhat.com/us-26/traini... Our advanced defensive engineering training will teach you about the detection engineering lifecycle, SOC automation with playbooks and AI-based agentic workflows.

FalconForce was back at NorthSec in Montreal, Canada, with our 3-day advanced detection engineering workshop! The students had an ultimate learning experience with the opportunity to go all-in with real-life, hands-on lab exercises. We hope you learned a lot!

Get your ticket before May 22 to get the best early-bird price to our completely rebuild, hands-on, advanced defensive engineering training at BlackHat USA. More information and registration: blackhat.com/us-26/traini...

The early-bird rate is available until 22 May. More information and tickets: blackhat.com/us-26/traini...

Last week, we joined @specterops.io's SO-CON conference in Arlington, US. It has been an exciting week, with two FalconForce presentations on stage from Marat Nigmatullin and @olafhartong.nl. We look back at a great time at SO-CON!

We are excited to meet all the participants who have signed up already. For everyone else: you have a few more weeks to secure your ticket nsec.io/training/202...

We are excited to meet all the participants who have signed up already. For everyone else: you have a few more weeks to secure your ticket nsec.io/training/202...

@1ns0mn1h4ck.bsky.social has been great! Workshops in combination with an awesome conference, with amazing people from all around coming together in such a stunning environment. We had an excellent time! If you have missed this opportunity, please have a look at our website: falconforce.nl/events/

By popular demand, FalconForce is bringing its Advanced Defensive Engineering in the Enterprise training home! We will provide the training as an independent event in September 2026 in Utrecht, the Netherlands. Registration and information: www.tickettailor.com/events/falco...

We will travel to Las Vegas for the 5th time and host our new ADE training at #bhusa. Based on our own research and the great input we had in the past years from various trainings held, we further tweaked our training. More information and registration blackhat.com/us-26/traini...

We had a great time at @wildwesthackinfest.bsky.social @ Mile High 2026. @olafhartong.nl was on stage sharing about his follow-up research. EDRs can be fooled by tampering with the data they rely on. If we can't trust our logs, how do we deal with that? We look forward to the next edition of #WWHF!

Did you know that there is a very attractive rate for students? 🤫

FalconForce is proud to be part of SpecterOps' SO-CON conference in April. And this year, there’s not one but two FalconForce talks at #SOCON! More information and registration: specterops.io/so-con/

SOC analysts spend lots of valuable time on collecting more information, before being able to make decisions. Want to know more? Join our waitlist (falconforce.nl/services/blu...) and request a demo today.

In a few weeks, we will be in Lausanne, Switzerland, for our 3-day workshop Advanced Detection Engineering in the Enterprise at @1ns0mn1h4ck.bsky.social. Get your tickets now: insomnihack.ch/workshops/ad...

SOC analysts spend lots of valuable time on collecting more information, before being able to make decisions. Want to know more? Join our waitlist (falconforce.nl/services/blu...) and request a demo today.

FalconForce is proud to be part of SpecterOps' SO-CON conference in April. And this year, there’s not one but two FalconForce talks at #SOCON! More information and registration: specterops.io/so-con/

At FalconForce, we are always looking to enhance our detection engineering practices. In our latest #FalconFriday blog, we present the applied research that was done and our observations on near-real-time (NRT) analytic rules in practice: falconforce.nl/falconfriday...

The Insomni'hack (@1ns0mn1h4ck.bsky.social) cyber security conference takes place in Switzerland from March 16-20. We will once more facilitate our 3-day workshop Advanced Detection Engineering in the Enterprise. Visit insomnihack.ch/workshops/ad... for more details and to secure your ticket.