Threat Hunting on Code and Cypher

Threat Hunting on Code and Cypherhttps://codeandcypher.com/tags/threat-hunting/Enterprise cybersecurity research by Joshua A. Wortz, CISSP: Zero Trust, cloud security, DevSecOps, threat defense, and AI-security education.Code and Cypherhttps://codeandcypher.com/images/papermod-cover.pnghttps://codeandcypher.com/Hugoen-usFri, 02 Oct 2026 15:48:11 -0700Acuity Health: Part 7 — Cyber Threat Intelligence & Flare Operationshttps://codeandcypher.com/series/acuity-health-security-architecture/part-7-cyber-threat-intelligence-flare-operations/Tue, 20 Oct 2026 00:00:00 -0700https://codeandcypher.com/series/acuity-health-security-architecture/part-7-cyber-threat-intelligence-flare-operations/Build an actionable CTI program using MITRE ATT&CK, prioritize threat intelligence requirements, and respond dynamically to adversary flare campaigns.Acuity Health: Part 5 — Active Defense & Canary Deceptionhttps://codeandcypher.com/series/acuity-health-security-architecture/part-5-active-defense-threat-hunting-canaries/Tue, 06 Oct 2026 00:00:00 -0700https://codeandcypher.com/series/acuity-health-security-architecture/part-5-active-defense-threat-hunting-canaries/Engineer active deception environments, plant canary tokens in memory and file shares, and automate blue team threat hunting across enterprise network shares.Active Blue-Team Defense, Applied Cryptography & Security Operationshttps://codeandcypher.com/papers/active-defense-cryptography-and-blue-team-integration/Mon, 13 Jul 2026 00:00:00 -0700https://codeandcypher.com/papers/active-defense-cryptography-and-blue-team-integration/Enterprise research synthesis on active blue-team defense, applied cryptography, and Zero Trust network telemetry operations in high-threat environments.Supply Chain Cyber Attack Investigation: Root Cause Analysis, Impact Scoping, and Remediationhttps://codeandcypher.com/papers/csol570-final-assignment-7-1-supply-chain-attack-investigati/Sat, 18 Oct 2025 00:00:00 -0700https://codeandcypher.com/papers/csol570-final-assignment-7-1-supply-chain-attack-investigati/Forensic root cause analysis and scoping of a decentralized software supply chain compromise, establishing containment and vendor remediation.Post-Exploitation Detection and Network Reconnaissance Signature Analysishttps://codeandcypher.com/papers/csol570-post-exploitation-and-nmap-scanning/Mon, 29 Sep 2025 00:00:00 -0700https://codeandcypher.com/papers/csol570-post-exploitation-and-nmap-scanning/Technical analysis of network reconnaissance signatures and post-exploitation detection using telemetry from host and network sensors.Open Source Intelligence (OSINT) and Mobile Telemetry for Blue Team Defensehttps://codeandcypher.com/papers/csol570-open-source-and-mobile-intel-for-security/Sat, 20 Sep 2025 00:00:00 -0700https://codeandcypher.com/papers/csol570-open-source-and-mobile-intel-for-security/Open-source intelligence (OSINT) and mobile telemetry collection framework for proactive threat hunting and attack surface monitoring.Honeypots and Deception Technologies: Strategic Attacker Disruption and Early Warninghttps://codeandcypher.com/papers/csol570-honeypots-and-deception-techniques/Sun, 14 Sep 2025 00:00:00 -0700https://codeandcypher.com/papers/csol570-honeypots-and-deception-techniques/Strategic evaluation of honeypots, honeytokens, and active deception technology to disrupt attacker reconnaissance and generate high-fidelity alerts.The Blue Team Mindset: Active Defense, Telemetry Engineering, and Defensive Posturehttps://codeandcypher.com/papers/csol570-the-blue-team-mindset/Fri, 01 Aug 2025 00:00:00 -0700https://codeandcypher.com/papers/csol570-the-blue-team-mindset/Exploration of active blue-team defense methodologies, telemetry engineering, and continuous adversary engagement in enterprise SOCs.