Threat research
PHP2Shell: From Log Indicators to Evidence-Based Investigation
Understand the PHP2Shell risk and investigate suspicious PHP activity by correlating BehaviorLens findings with web logs and endpoint telemetry.
Blog
Research, field notes and product updates
Practical writing from the Defensium team on threat hunting, DFIR, compromise assessment and the product.
Endpoint performance
High-Depth Threat Detection Without Heavy Endpoint Impact
Discover how Defensium combines high-depth endpoint threat detection with resource-aware scanning, controlled workload and operationally flexible scan profiles.
Platform perspective
Why Detection Alone Is Not Enough for Modern DFIR
Discover how Defensium connects threat detection, forensic evidence, fleet-wide investigation and authorised response without losing investigation context.