Stay ahead of the threat

Subscribe to Skuggaheimar

New threat-actor profiles, ransomware and malware analysis, detection content and advisories — delivered as we publish. Pick the channel that fits your workflow.

Instant · no sign-up

RSS feed

Add Skuggaheimar to your feed reader, SIEM content pipeline or Slack/Teams RSS connector and get every new report the moment it ships. No email, no account.

Open the RSS feed
  • Full article feed with categories and publish dates
  • Works with any reader or automation that speaks RSS
  • Browser search integration via OpenSearch
Curated · to your inbox

Email briefing

Prefer a human-curated digest? Join the Mjolnir intelligence briefing list for new research, threat briefs and advisories, plus early access to deeper paid reports.

Sign up by email
  • New threat-actor, ransomware and malware research
  • MTAC threat briefs and critical-vulnerability advisories
  • Detection-engineering content for blue teams
Join the email briefing

We use this list only to send Skuggaheimar research and Mjolnir Security advisories. No third-party selling. Unsubscribe any time. For incident response, call our 24/7 hotline: +1 833 403 5875.

Featured resource

The Detection Engineering Field Guide

Our detection library covers 14 attack domains — C2, lateral movement, persistence, defense evasion, privilege escalation, Active Directory, edge and web shells, ransomware, exfiltration, identity and cloud, phishing, infostealers, tunneling and ransomware precursors — each with 15 pages of signals, tunable Sigma/KQL/SPL/Suricata detections and ATT&CK mapping. All of it is free to read.

210 detection pages · mapped to MITRE ATT&CK · copy-ready queries

Browse the detection library   Get it as a briefing

Want the curated PDF field guide and quarterly detection updates? Join the email briefing above and we will send it over.

Mjolnir hammer mark