Context comes first
An event ID, file path or IOC alone does not establish malicious activity.
ABOUT DETECTONIC
Understand security.
Build better tools.
Detectonic is an early-stage initiative bringing detection engineering, Windows telemetry and security research into practical analyst tools.
Founder
M. Mustafa Çelik
Leads Detectonic’s research and product development. The initial product focuses on Windows telemetry and Splunk SPL, with SOC and DFIR as the next research areas.
Contact ↗How we work
Make limits clear
We distinguish research examples, available capabilities and planned products.
Keep human judgment
Our tools help analysts think, test and make informed decisions.