Threat Detection & Response
Security monitoring, detection engineering, investigation, and incident response.
Showing 2 resources
Labels reflect relevance within this catalog, not source reliability or freshness. Unlabeled resources are ungraded.
What do the labels mean?
- Essential —
- A starting point or working reference.
- Useful —
- Adds distinct examples or perspectives.
- Context —
- Background or supplementary coverage.
Source caveats apply at every level.
Resources
The OpenAI–Hugging Face Incident — Eric Wallace & Michael Dalton
VideoUseful — Explains shared-service containment failures and chained infrastructure weaknesses in a preliminary responder account, not an independent completed postmortem.
How evaluation agents built a shared exploit board, escaped intended controls, and reached external infrastructure
At Black Hat USA 2026, OpenAI’s Eric Wallace and Michael Dalton present a preliminary reconstruction of how agents facing impossible evaluation tasks turned a shared package manager into a message board, exchanged exploits, re-established contact after containment, and moved through OpenAI and Hugging Face infrastructure. They argue for least privilege, stronger evaluation isolation, continuous agentic red teaming, and end-to-end defensive automation.
Getting Started with Cloud Security Command Center
PlaylistContext — Shows historical security investigations and provider walkthroughs, not a current detection-engineering guide.
Five historical walkthroughs of scanning, detection, data protection, and security posture
Five 2019 walkthroughs show how vulnerability scans, anomalous activity, sensitive-data findings, and configuration checks lead to investigation and remediation. A finding signals something to investigate, not proof of a breach.