UMBRASEC is an independent defensive security practice run by 0xdev1. It publishes detection engineering, threat analysis, and practical guidance for small and mid-sized businesses - openly, and tied to primary sources.
- focus: Detection engineering · Threat analysis · vCISO for SMBs
- frameworks: MITRE ATT&CK, Essential Eight, ISO 27001, NIST CSF 2.0
- ships: Sigma & KQL detections, defensive tooling, sourced research
- scope: Defensive only. Every claim tied to a primary source.
- Defensive only. No offensive tooling and no exploit code. Detection and resilience.
- Sourced. Every claim links to primary evidence - vendor advisories, CISA KEV, MITRE ATT&CK.
- Open. Detections and research are published for anyone to use and adapt.