The Blumira Blog
Security How To's
158 of 831 entries on the Blumira resource shelf, filed under Security How To's.
831articles and resources
8topic routes
4formats
June 9, 2026most recent entry
Featured learning path
One route from "what is happening" to "prove it."
Four stops. Each one is stocked from the archive and hands you to the next.
-
Understand the threat
Read what attackers are doing to teams your size before it reaches you.
-
Harden what you run
Step-by-step how-tos for the tools already on your network.
-
Evaluate with evidence
Checklists and pricing teardowns for the decision itself.
-
Prove it holds up
Compliance frameworks, audits, and cyber insurance, translated.
Security Trends and Info Ransomware Protection: The 2026 Defense Playbook Read
Security How-To How to Choose a Security Operations Platform Read
Security How-To The Complete SIEM Buyer's Checklist Read
Security How-To Proven Ways to Take Control of Windows & Entra Security Read
Security How-To Cybersecurity Training in Manufacturing: Insights from the 2025 Verizon Data Breach Investigations Report Read
Security Trends and Info Why “Silent But Deadly” Infostealers Are Summer’s Hottest Trend Read
Security Trends and Info The Iranian Cyber Threat: Key Insights for IT Teams Read
Security Trends and Info What Iran-Based Activity Can Teach Us About Everyday Security Resilience Read
Security Trends and Info 5 Steps to Minimize Impact After Vendor Security Incidents Read
Security Trends and Info Turn Up Your Network Defenses to Eleven. Turn Down the Noise Pollution Read
Security How-To On Demand - How Blumira Does Security Operations Read
Security Trends and Info XSS: What It Means, How It Works, and How to Prevent It Read
Security How-To On Demand - Resilient Relationship Security: Reduce Lost Connections Read
Security How-To On Demand - Maximizing Security Effectiveness with Limited Resources Read
Security How-To Normalizing Security Culture: Don't Have to Get Ready if You Stay Ready Read
Security How-To On Demand - Detection and Response Decoded: From AV to XDR Read
Security How-To On Demand - I Log IT A Lot – Free Logging for Duo Security and Umbrella with Blumira Read
Security How-To How MDR Services Leave Your Organization Vulnerable Read
Security How-To How to Evaluate Your Organization's Security Posture Read
Security How-To Election-Inspired Incident Response: Real Lessons Read
Security How-To Ace Your Next Cybersecurity Audit: A Checklist Read
Security How-To Blumira Domain Security Assessment Video Read
Security How-To On Demand - Tabletop Exercises: Improve Your Practice for Better Incident Response Read
Security How-To I Can SIEM Clearly Now, the Pain is Gone (with Rapid SIEM Deployment) Read
Security How-To How To Use Nmap for Network Inventory and Asset Discovery Read
Compliance Security Frameworks and Insurance 4 key steps to building an incident response plan Read
Security How-To On Demand - Cybersecurity Essentials: Protecting Your Business Without Breaking the Bank Read
Security How-To Cybersecurity Threat Hunting with Blumira Read
Security How-To Communicating a Data Breach: How to Break the News to Your Boss Read
Compliance Security Frameworks and Insurance 10 Steps to ISO 27001 Certification for Your Manufacturing Company Read
Security How-To How to Secure Remote Access for Manufacturing Operations Read
Security How-To SOC it to Me: Simplifying Cybersecurity One Step at a Time Read
Security How-To Top 6 Common Security Mistakes (and How to Avoid Them) Read
Security How-To Navigating the Complexity of Multicloud Security: Insights from 451 Research Read
Security Trends and Info Detecting and Preventing Ransomware Attacks in Microsoft Environments Read
Compliance Security Frameworks and Insurance Breaking Free from Cyber Complacency: A Five-Step Guide Read
Security Trends and Info Blumira and Cybersecurity Tech Trends Read
Security How-To Lessons Learned from 3 Cyberattacks in Financial Services Read
Security How-To “Entra”sting Roles You’ll Want to Know About Read
Security How-To Getting Started with Sysmon: Configuration and Best Practices Read
Security How-To How To Detect File Changes in Windows Server Read
Security How-To The Hedgehog Defense – Default Apps Read
Security How-To Uncover Threats in Your Windows Environment with Sysmon Read
Security How-To Incident Response for State and Local Governments Read
Security How-To The steps municipalities can take to prepare for rising cyberattacks Read
Security How-To Revolutionizing Government Cybersecurity: Ottawa County’s Journey with Blumira Read
Security How-To 4 Unexpected Ways to Strengthen State and Local Government Cybersecurity Read
Security How-To How to Identify and Prevent Phishing in Businesses Read
Security How-To Cybersecurity Detection and Protection—No Matter How You Say it Read
Security How-To How to Get Cybersecurity Buy-in from Executive Leadership Read
Security How-To How Manufacturing Companies Can Prevent Cyber-Attacks Read
Security How-To Blumira’s SMB Cybersecurity Checklist Read
Security How-To ESG: Strategies for Supercharging Security Teams Read
Security How-To Correlating GeoIP Lookups Read
Security How-To Incident Response Strategies for Ransomware Read
Security How-To Building Effective Incident Response Procedures Read
Security How-To 5 Tools To Make The Most Of Your Security Budget Read
Security How-To Authentication Protocols 101: NTLM, Kerberos, LDAP and RADIUS Read
Security How-To Sysmon 101: Leveling Up Windows Security Read
Security How-To 6 Tips for a Remote Working Security Policy Read
Security How-To How To Detect SYSVOL Enumeration Exploits Read
Security How-To How to Select a SIEM for Microsoft 365 Read
Security How-To Monitor Remote Employees Ethically and Effectively Read
Security How-To 5 XDR Features Small Businesses Should Prioritize Read
Security How-To Assessing Your Firewall Needs for Enhanced Security Read
Security How-To How Endpoint Isolation Locks Down Cyber Attacks Read
Security How-To Top 5 Steps For SMB Endpoint Security Success Read
Security How-To How To Manage Windows Firewall with GPOs Read
Security How-To Top 18 Tips to Secure SSH on Linux Read
Security How-To How To Use Nmap To Scan For Open Ports Read
Security How-To 7 Remote Work Security Risks and How To Protect Against Them Read
Security How-To Office 365 Audit Log Retention: Why It Matters and Best Practices Read
Security How-To How To Detect Data Exfiltration Read
Security How-To A Guide To Microsoft Azure Security Logging Read
Security How-To 5 Best Practices For Security Log Retention Read
Security How-To Find a User with Their Security ID in Windows Read
Security How-To Active Directory Password Auditing with NtdsAudit & NThashes Read
Security How-To Event ID 4732: The Case of the Missing Username Read
Security How-To Securing Exchange Server: 8 Best Practices Read
Security How-To Proper SIEM Tuning for Better Security Outcomes Read
Security How-To How to Use Your SIEM as a Business Enabler Read
Security How-To Detecting Microsoft Legacy Authentication with Blumira Read
Security How-To Is This Thing On? Microsoft 365 Security Read
Security How-To What You Need To Know About Windows Event IDs Read
Security How-To Building a SOC: What Does It Actually Take? Read
Security How-To How to Build a SOC on a Budget Read
Security How-To Understand Microsoft 365 Impossible Travel Rules Read
Security How-To Top 5 Office 365 Security Issues Read
Security How-To Defending Against Common Microsoft 365 Attacks Read
Security How-To The Return of IcedID and How to Detect It Read
Security How-To Protect Microsoft 365 From Business Email Compromise Read
Security How-To Analyzing MITRE’s Top Observed Attacker Techniques Read
Security How-To Top 7 Cloud Security Best Practices For 2022 Read
Security How-To Cover Your Assets: Performing a Successful Security Inventory Read
Security How-To Detecting DNS Tunneling: The Light At The End Read
Security How-To Email Forwarding Security Risk (And How to Detect) Read
Security How-To Shortening Ransomware Dwell Time Requires Fast Detection Read
Security How-To Catch a Pentester: Putting Your SIEM to the Test Read
Security How-To How To Detect AS-REP Roasting With Blumira Read
Security How-To What To Log In A SIEM: Logging Best Practices Read
Security How-To How To Mitigate The Latest Windows Vulnerabilities Read
Security How-To Group Policy Gotchas: GPO Settings That Expose Your Environment Read
Security How-To Best Practices For Configuring Firewall Rules Read
Security How-To Fireside Chat: Starting From Security Square One Read
Security How-To Why Antivirus Is Not Enough To Prevent Ransomware Read
Security How-To Stay Ahead in Ransomware Crisis Read
Security How-To 5 Tips to Combat Cybersecurity Alert Fatigue Read
Security How-To 5 VMware Carbon Black Detections to Prevent Ransomware Read
Security How-To Is This Thing On? How To Test Your EDR Read
Security How-To Ransomware Protection: Top 7 Best Practices Read
Security How-To 5 Ways SMBs Can Defend Against Ransomware Read
Security How-To The Ransomware Prevention Guide For SMBs Read
Security How-To FutureCon: Building Intentional Security Culture In a Time of Complexity Read
Security How-To How To Test Antivirus and EDR Software: A Complete Guide Read
Security How-To How to Install & Configure Microsoft LAPS Read
Security How-To Is This Thing On? How To Test Your SIEM Read
Security How-To 30-Minute Security How-To: Remediate a Malware Infection Read
Security How-To 30-Minute Security How-To: Detect Web Shells Read
Security How-To A Guide To Cybersecurity Deception Techniques Read
Security How-To How to Disrupt the Ransomware Kill Chain Read
Security How-To How to Tell If You Have Ransomware 6 Warning Signs Read
Security How-To How to Detect Web Shells With a SIEM Read
Security How-To Securing Cloud Infrastructure: Preventing Privilege Escalation in AWS Read
Security How-To Detecting Breaches in the Cloud Read
Security How-To Lock Down PowerShell or Else! Read
Security How-To Defending Against AD Kerberos Attacks Read
Security How-To Comparing the Cost of a Ransomware Attack vs. a Cloud SIEM Read
Security How-To So You Failed Your Pentest, Now What? Read
Security How-To Detecting SolarWinds & Ransomware Attacks With Process Monitoring Read
Security How-To Blumira + WWT Roundtable: Detecting & Responding to Microsoft Threats Read
Security How-To Detect & Protect Against the SUNBURST Backdoor Read
Security How-To Blumira’s Security Advisor Series: Improving Your Security Posture Based on Incident Response Experience Read
Security How-To Blumira’s Security Advisor Series: How to Assess Your Detection & Response Capabilities Read
Security How-To Security Detections for a Hybrid Azure AD Join Environment Read
Security How-To Blumira’s Security Advisor Series: Security Monitoring for ICS Read
Security How-To Flowmira: NXLog Configs for Windows Security Read
Security How-To Guide to Microsoft Security Read
Security How-To Blumira's Security Advisor Series: Securing Remote Work With Zero Trust Read
Security How-To Get Your Threat Detection & Response Assessment Read
Security How-To Threat Detection & Response Assessment Read
Security How-To Blumira's Security Advisors Series: Running Lean Security Operations Read
Security How-To How to Test Your SIEM’s Detections Read
Security How-To Blumira's Security Advisors Series: How to Easily Detect Lateral Movement Read
Security How-To Test SIEM Detections for Password Spraying Read
Security How-To Five Easy Ways to Test Your SIEM's Detections - On-Demand Read
Security How-To How to Reduce Your Overall Attack Surface With Geoblocking Read
Security How-To How to Increase Windows Log Visibility: A Tutorial Read
Security How-To How to Mitigate Against the SMBleed Vulnerability & POC Exploit Read
Security How-To Logmira: Windows Logging Policies for Better Threat Detection Read
Security How-To Windows Logging Tips for Better Threat Detection - On-Demand Read
Security How-To Top Five Security Threats You Should Be Detecting Read
Security How-To How To Download, Install, and Configure Sysmon for Windows Read
Security How-To Replace Your SIEM: Traditional vs. Modern SIEM Read
Security How-To Hands in the Honeypot: Detecting Real Security Threats Read
Security How-To How to Optimize Windows Logging for Security Read
Security How-To Guide: How to Replace Your SIEM Read
Security How-To Detection as an Effective Strategy for Cyber Attacks Read
Security How-To How to Determine (And Stick To) a Cybersecurity Budget Read
Inside every article
No dead ends. Each article is wired to a next step.
The rebuilt article template treats a post like an operational record: an answer up top, evidence in the body, and exit routes at the end. Reading is step one, not the whole trip.
See the live template: Using NmapWhen reading turns into evaluating
Three working exits from the library.
The next step
You came with a question. Leave with a running SIEM.
Everything on this shelf points the same direction: see your environment clearly and act on it. Blumira's Free SIEM takes that from reading to reality in an afternoon.