Pheromone Check Day 3: Pheromone Check. Ants don’t trust faces. They trust scent. We use MFA + risk. My lab…
Melissa W. — Detection Engineer | IAM & ITDR Analyst | SOC & GRC Specialist | Python SIEM Automation (120m→30m) | DORA & NIS2 Compliance | Triple MSc CS/DS/AI | W-8BEN Approved Contractor (Remote CET/EST)
Pheromone Check
Day 3: Pheromone Check.
Ants don’t trust faces. They trust scent. We use MFA + risk.
My lab today: hunter.py sniffed a “London” login with VPN pheromone. Risk score 9.0/10.
Geographic deviation +4.0, VPN +3.5, hosting +2.0.
Geographic +4.0, VPN +3.5, hosting +2.0 = flag.
That’s not alert fatigue. That’s one high-fidelity signal.
That’s DORA Art 10 continuous detection, not alert fatigue.
DM “CHECK” for the 48h gap assessment.
#ThreatHunting #Python
1 reactions · 0 comments
Topics: #python, #threathunting