Delta Tradecraft: Portable Detection Knowledge
Methodology6 min read · Aug 2026
FRONTIER AI RESEARCH
FOR MODERN THREAT DETECTION.
The research team behind Spectrum Security, pushing AI to the limit in the name of better defense.
DETECTION DESERVES BETTER
When detections fail and threats are missed, the entire SOC
notices. Delta pushes frontier AI to the limit so that every
detection engineer is armed for modern threats. Below you’ll
find the research that makes a 100x detection engineer.
THE
ENEMY
missed threats from broken detections
OUR
MISSION
100x every detection engineer
Tradecraft
An open format for codifying the messy context
about threats and technologies that detection
logic itself cannot.
hf-02-dataset-configuration-ssrf-cloud-metadata.tradecraft.yaml
identity: id: "DT-OAIHF-AI-002" name: >- Dataset-Configuration SSRF Attempt Toward Cloud Instance Metadata incident: "openai-hugging-face-breach" first_observed: "2026-07" last_reviewed: "2026-08-06" classification: primary_attack_surface: "application-ai-platform" secondary_attack_surfaces: - "cloud-instance-metadata" - "container-workload" behavior_classes: - "server-side-request-forgery" - "cloud-metadata-access-attempt"Field notes on the craft of detection: tools, techniques, rule teardowns, and methodology.
Filter byAll posts
Upcoming events
Where to meet Delta and learn live — workshops, webinars, conference talks, office hours.
Sep 01
2026
Save your spotTee Time · Golf at Fal.Con 2026
Las Vegas, NV · 2 hrs
Sep 12
2026
Learn moreDelta @ Blue Team Con 2026
Chicago, IL · 2 days
Subscribe to the calendar
We’ll tell you first when new sessions are scheduled.
Meet the researchers
The people doing the work — and publishing it.
Dylan Williams
Head of Research
Anthony Jirouschek
Detection engineering
Rich Alldrin
Detection engineering