Micah Babinski – Medium

Micah Babinski

Micah Babinski

·

Nov 26, 2025

Detecting Malicious ArcGIS Server Object Extensions

Finally, the GIS/Detection Engineering Crossover Episode!

Detecting Malicious ArcGIS Server Object Extensions

Micah Babinski

·

Sep 9, 2024

Dive into Sigma Correlation Rules

And go hunting for Cicada3301 ransomware behaviors in the process

Photo of a diving board next to a natural body of water.

Micah Babinski

·

Oct 30, 2023

Hunting G-G-G-GhostTasks!

Detecting a Spooktacular Persistence Procedure

Latte art with a ghost in the foam

Micah Babinski

·

Oct 16, 2023

It’s Always DarkGate Before the Dawn

Detecting DarkGate, an Emerging Malware Threat

Photo of a sunrise over Mount Hood.

Micah Babinski

·

Aug 1, 2023

Search-ms, WebDAV, and Chill

Detecting a [Re-]emerging Initial Access Method

Person relaxing on the couch with a computer.

Micah Babinski

·

May 26, 2023

Button-Pusher to MasterBuilder: Automating SIEM Workflows

Build Confidence and Skill in SIEM Automation

Image of a home-made toy robot

Micah Babinski

·

Apr 17, 2023

Brace for Impacket!

Detecting a Red Team (and Threat Actor) Favorite

Brace for Impacket!

Micah Babinski

·

Jan 31, 2023

Detecting OneNote (.One) Malware Delivery

I opened a dozen malicious OneNote files and clicked on every link so you don’t have to

Detecting OneNote (.One) Malware Delivery

Micah Babinski

·

Dec 28, 2022

HTML Smuggling Detection

Introduction

HTML Smuggling Detection

Micah Babinski

·

Dec 13, 2022

Finding the Gap: How Curiosity and Creativity Drives Threat Detection

Let the Real World be your Lab with Mitre ATT&CK, Atomic Red Team, and Sigma

Finding the Gap: How Curiosity and Creativity Drives Threat Detection

Micah Babinski

Micah Babinski

A cybersecurity pro, bagpiper, and enthusiastic-but-amateur chef living in Milwaukie, Oregon. Currently working as a Principal Detection Engineer at Amtrak.

Following

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech