Security & Monitoring

Deep dive into application security, threat detection, and monitoring best practices with SecureNow's advanced features.

Lhoussine

Analyzing Multipart File Upload Requests for Security Issues — A Practical Guide with SecureNow Tracing

Learn why multipart/form-data requests are a blind spot in most observability setups, what security risks they carry, and how to capture upload metadata in your traces without buffering file content — using SecureNow's new streaming multipart parser.

Apr 4

Lhoussine

Axios npm Compromise (March 31, 2026): How to Check Your Project and Runtime for Exposure

Step-by-step guide to auditing your Node.js project for the Axios supply chain attack that shipped a remote access trojan via plain-crypto-js. Includes a ready-to-paste AI audit prompt, IOC checklist, and SecureNow forensics queries to detect runtime compromise.

Mar 31

Lhoussine

SOC Notification Triage: From Alert Overload to Actionable Incidents

Master the art of SOC notification triage with structured workflows. Learn to filter, prioritize, and resolve security alerts efficiently using status-based workflows and AI-powered investigation.

Mar 3

Lhoussine

Eliminating False Positives: A SOC Team's Guide to Smarter Alerting

Reduce false positive rates in your SOC with AI-suggested exclusions, test-before-apply workflows, and intelligent path pattern matching. A practical guide to cleaner alerts.

Mar 1

Lhoussine

Real-Time IP Monitoring at Scale: Tracking Thousands of IPs Across Your Infrastructure

Monitor and investigate thousands of IP addresses in real-time with automated threat intelligence enrichment, status tracking, and batch analysis for enterprise security operations.

Feb 27

real time ip monitoring security operations

Lhoussine

Building Alert Rules That Actually Catch Threats (Without the Noise)

Design effective SQL-based security alert rules with smart throttling, channel routing, and exclusion patterns. A practical guide to reducing noise while catching real threats.

Feb 25

Lhoussine

Case Study: How a SOC Team Detected a Credential Stuffing Attack in 12 Minutes

A step-by-step walkthrough of how a SOC team used AI-powered investigation, alert rules, and false positive management to detect and respond to a credential stuffing attack across 47 attacker IPs.

Feb 23

credential stuffing attack detection soc

Lhoussine

AI-Powered Trace Analysis: Detecting Security Issues Hidden in Application Spans

Discover how AI-driven trace analysis uncovers SQL injection, SSRF, auth bypass, and path traversal attacks that WAFs miss — by examining application behavior at the span level.

Feb 21

Lhoussine

Security Forensics with Natural Language: Query Your Traces Like You Think

Transform security investigations with natural language forensics. Ask questions in plain English and get instant SQL results from your ClickHouse trace data — no query syntax required.

Feb 19

security forensics natural language query

Lhoussine

API Attack Surface Discovery: Map Every Endpoint Before Attackers Do

Automatically discover and map your entire API surface from live traffic using AI-enhanced endpoint analysis. Find shadow APIs, undocumented endpoints, and parameter patterns attackers exploit.

Feb 17

Lhoussine

Enriching Threat Intelligence with AbuseIPDB: Beyond Basic IP Reputation

Go beyond simple IP blocklists. Learn how SecureNow combines AbuseIPDB reputation data with application-level trace analysis for higher-confidence threat verdicts and faster incident response.

Feb 15

abuseipdb threat intelligence enrichment

Lhoussine

Quadrant Analysis: Identifying Malicious IPs Through Traffic Behavior Patterns

Use quadrant analysis to visually identify malicious IPs, scanners, and bots by plotting traffic behavior patterns. Learn to interpret success-to-error ratios for rapid threat classification.

Feb 13

Lhoussine

Anatomy of an API Abuse Campaign: Detection to Remediation in 45 Minutes

A detailed walkthrough of detecting and stopping an API abuse campaign using API surface discovery, AI investigation, trace analysis, and forensic queries — from first alert to full remediation.

Feb 11

Lhoussine

How a Developer Caught a Supply Chain Attack in Trace Data

A realistic scenario of how a developer discovered a compromised npm package through unusual outbound HTTP calls in OpenTelemetry trace data — and used AI analysis to confirm and contain the threat.

Feb 3

supply chain attack detection trace data

Lhoussine

Stopping a Distributed Bot Attack: A Multi-Feature Response Playbook

A detailed playbook for detecting and stopping a distributed bot attack using quadrant analysis, AI investigation, AbuseIPDB enrichment, forensic queries, and false positive management.

Jan 30

distributed bot attack detection response

Lhoussine

Detecting Insider Threats Through Application Trace Anomalies

How to detect insider threats by analyzing application trace patterns — after-hours access, unusual data exports, and privilege escalation detected through forensic queries and AI investigation.

Jan 28

insider threat detection application traces

Lhoussine

SecureNow vs Traditional SIEM: Why Trace-Based Security Wins for Modern Applications

A detailed comparison of trace-based application security monitoring versus traditional SIEM — covering detection fidelity, false positive rates, time-to-detection, and total cost of ownership.

Jan 26

Lhoussine

How to Integrate SecureNow with Your Next.js Application

Complete guide to adding enterprise-grade security monitoring to your Next.js app with SecureNow. Learn automatic setup, manual configuration, and best practices for production deployment.

Dec 8

Lhoussine

Security & Monitoring

Analyzing Multipart File Upload Requests for Security Issues — A Practical Guide with SecureNow Tracing

Axios npm Compromise (March 31, 2026): How to Check Your Project and Runtime for Exposure

SOC Notification Triage: From Alert Overload to Actionable Incidents

Eliminating False Positives: A SOC Team's Guide to Smarter Alerting

Real-Time IP Monitoring at Scale: Tracking Thousands of IPs Across Your Infrastructure

Building Alert Rules That Actually Catch Threats (Without the Noise)

Case Study: How a SOC Team Detected a Credential Stuffing Attack in 12 Minutes

AI-Powered Trace Analysis: Detecting Security Issues Hidden in Application Spans

Security Forensics with Natural Language: Query Your Traces Like You Think

API Attack Surface Discovery: Map Every Endpoint Before Attackers Do

Enriching Threat Intelligence with AbuseIPDB: Beyond Basic IP Reputation

Quadrant Analysis: Identifying Malicious IPs Through Traffic Behavior Patterns

Anatomy of an API Abuse Campaign: Detection to Remediation in 45 Minutes

How a Developer Caught a Supply Chain Attack in Trace Data

Stopping a Distributed Bot Attack: A Multi-Feature Response Playbook

Detecting Insider Threats Through Application Trace Anomalies

SecureNow vs Traditional SIEM: Why Trace-Based Security Wins for Modern Applications

How to Integrate SecureNow with Your Next.js Application

How to Secure and Monitor Your Node.js App with PM2 and SecureNow

Features

Tutorials