Does anyone in #infosec remember that image of raw vs most scrubbed data? It was like Raw Event data, Sysmon, EDR, in that order? Something like that?
@nathanmcnulty @fabian_bader Any chance you remember what it was/where it was?

@GraemeB

@nathanmcnulty

Sorry I don't remember this in particular

@fabian_bader @GraemeB I don't :(

I wonder if @olafhartong might know off the top of his head

Introducing the Funnel of Fidelity - Posts By SpecterOps Team Members

At SpecterOps we work with companies to build robust detection and response programs. One of the stark realities is that human capital is limited, which is why we work with customers to find…

Posts By SpecterOps Team Members
@olafhartong @nathanmcnulty @fabian_bader @jaredcatkinson It does remind me of this, but different. I tried asking AI to make it for me, but it failed. I'm not sure if it was here or on Twitter.