Introductions remind me of dating profiles and I think they are weird.
But also I’m pretty weird so 
I am HGB and you may remember me from such films such as “Automated Detection with Sigma” (Course Catalog - #23 by mttaggart - General - The Taggart Institute) and some Sigma rules (Pull requests · SigmaHQ/sigma · GitHub)
I come from the SOC side of the blue team house and in the intel cycle I am more of the “consumer” of intel rather than the generator of it. I read articles, write detections, and cross my fingers that they never trigger. I’m hoping to spend some time here and share some of the indicators that I see from incident analysis and also learn more about how to connect the dots between incidents to build bigger pictures of the attacks I see.