Telemetry Strategy
Why five rules outperform two hundred
An analysis of detection telemetry proving focused rulesets yield fewer false positives.
AncileBase Research•
AncileBase Intelligence
Research & Telemetry
Deep dives into eBPF event capture, telemetry signal-to-noise ratios, and host-level containment metrics.
Performance
Benchmarking detection latency across fleet sizes
How our eBPF event capture scales under heavy system workloads.
AncileBase Research•
Authentication
False positive rates in SSH brute-force detection
A deep dive into parsing authentication logs at scale with low signal noise.
AncileBase Research•
Log Integrity
How chain-of-custody hashing resists tampering
How AncileBase secures event streams before they leave the host system.
AncileBase Research•
Exploit Detection
Detecting web shells via process hierarchy tracing
Analyzing execution lineages of webservers to identify remote execution backdoor backdoors.
AncileBase Research•
Privilege Safety
Privilege escalation signatures in Linux audit logs
Spotting unauthorized setuid executions and process namespace manipulation.
AncileBase Research•
Page 1 of 1