Topic
Security Operations
New IDG and ReliaQuest Research Finds Many Security Teams at a Critical Tipping Point with “Security Tech Sprawl”
An increasing attack surface promoted by a dynamic enterprise IT environment has had security teams facing more cyber threats and searching for more ways to combat them. However, having an array of security tools doesn’t necessarily make an enterprise more secure. In fact, new research from IDG and ReliaQuest suggests that “tool sprawl” or “tech […]
Security Alert Fatigue? False Positives? Common Problems in Threat Detection And How to Fix Them
If your team is suffering from security alert fatigue, too many false positives, and an overall reactive posture, you’re not alone. Organizations are continuing to invest in a growing suite of cyber security tools, complicating security operations, overwhelming teams, and negatively impacting threat detection. According to a 451 Research Report, 43% of enterprises are unable to act […]
How to Get the Most out of Your Security Monitoring with the Cyber Kill Chain Model
In our personal lives, many of us try to get the most out of a tank of gasoline – waiting until the red indicator shines bright and we finally have to stop at a gas station to fill our tank. This mindset extends to many aspects of our lives, both personally and professionally. For many […]
A Journey Through _time: How to Resolve Common Time-Based Issues in Splunk
“All we have to decide is what to do with the time that is given us.” – J. R. R. Tolkien Time is one of the most critical details included in any logs, whether they are security related or not. This is doubly important for Splunk, as it can affect whether alerts trigger, whether analysis […]
On the Hook: A Defense-in-Depth Approach to Mitigating Phishing Attacks
Purpose-built security tools are designed to solve for the ever-evolving threat landscape led by APTs, Nation-States, and Hacktivists, but is your organization accounting for the internal threats posed by your authorized users? Most phishing attacks require help from the end user to be successful Source: Peter Broelman The latest Verizon Annual Data Breach Investigations Report […]
Looking to Add a Cloud Provider SIEM to Your Existing SIEM Strategy? Consider These 5 Factors to Maximize Cost Savings and Detection Capabilities
As organizations look to embrace the cloud for more of their daily workloads, they’re faced with the challenge of how best to maintain visibility across their rapidly evolving environment and keep a handle on their security posture. Many cloud providers now provide their own SIEM offerings and entice you to make the switch from your […]
Proactive Practices to Mitigate the Misuse of Service Accounts
Service accounts, by design, are created to perform specific tasks for services running on endpoints. Depending on the service and how the service account is configured, service accounts can have a range of different privilege levels. Malicious actors understand that service accounts typically have higher privileges than normal user accounts, and often target these accounts […]
Four Tips for Getting the Most Value Out of Your EDR Solution, VMware Carbon Black
DR solutions are an integral part of an enterprise’s security posture and without them, an environment is left with many blind spots. That is why so many companies will invest in a reputable EDR solution such as VMware Carbon Black, SentinelOne, or Crowdstrike. Unfortunately, these tools do not self-manage and are not plug and play […]
Top 3 Reasons to Alert Based on the Cyber Kill Chain Model
Picture this – It’s 8 AM on Monday and you’re sitting at your desk with a fresh cup of coffee, ready to start a new week. You log in to your workstation, hopeful that your team can kick-off the proactive DNS threat hunt you’ve planned out. Once you’ve opened the usual web browser tabs and […]
No results
