Prophet AI Blog

Discover the Prophet AI Blog, your go-to source for the latest security insights and news, helping you stay ahead in threat detection and investigation.

Discover Prophet AI for Security Operations

See for yourself how AI can transform the way security teams operate

Supply Chain Attack Detection: How to Hunt Compromised npm and Python Packages

Supply chain attack detection for npm and PyPI: how to hunt compromised packages on laptops, CI runners, source control and cloud accounts, step by step.

November 4, 2026
Augusto Barros

BYOVD Detection: How to Hunt Vulnerable Drivers Used to Disable EDR

BYOVD detection for SOC teams: how to hunt vulnerable driver loads and the EDR sensors that go quiet after them, using logs collected off the endpoint.

November 4, 2026
Augusto Barros

What Claude Cowork EDR Support Means for Security Operations

Claude Cowork EDR support, in beta, puts an approved EDR sensor in Cowork's local VM. What it sees, where it can't reach, and what the SOC should check first.

November 3, 2026
Ajmal Kohgadai

Shadow AI Detection: How to Hunt Unapproved AI Apps, Agents and API Use

Shadow AI detection for SOC teams: how to hunt unapproved AI apps, OAuth grants, coding agents and AI API calls with proxy, identity, EDR and cloud logs.

November 2, 2026
Ajmal Kohgadai

Mean Time to Contain (MTTC) vs MTTR in an AI-Driven SOC

Mean time to contain (MTTC) measures how fast your SOC stops an attack from spreading. How it differs from MTTR, how to measure it, and what AI changes.

October 28, 2026
Ajmal Kohgadai

Data Exfiltration Detection: How to Hunt It on Hosts, Networks and SaaS

Data exfiltration detection beyond DLP: how to hunt staged archives, transfer tools, DNS tunneling and bulk cloud and SaaS downloads in the logs you have.

October 27, 2026
Ajmal Kohgadai

php2shell: Detecting and Investigating CVE-2026-109618 and CVE-2026-109619

CISA lists php2shell (CVE-2026-109618, CVE-2026-109619) as exploited. How to scope exposed PHP hosts and appliances, and hunt for signs of exploitation.

October 27, 2026
Ajmal Kohgadai