Attending Splunk .conf21? Join us for our session, Tips from the Trenches: Practical Search and Response to Stop Ransomware with Splunk. Learn More ➞

Tag
Threat Intelligence

Tags10 Notifications

Mitigate Threats on the Endpoint with ReliaQuest GreyMatter Open XDR-as-a-Service + SentinelOne

ReliaQuest GreyMatter delivers Open XDR-as-a-Service—a force multiplier for security operations to increase visibility, decrease complexity and reduce risks. Watch this demo video to follow an investigation leveraging both GreyMatter and the power of the SentinelOne API to mitigate potential threats on the endpoint. In this example, the Sentinel One and GreyMatter integration provides unified visibility […]

Tags8 Notifications

Mitigate Phishing + Boost Security Operations with ReliaQuest GreyMatter Open XDR-as-a-Service

Minimize the time it takes to mitigate phishing attacks and force multiply your security operations with ReliaQuest GreyMatter Open XDR-as-a-Service. Many organizations continue to face phishing threats and have limited visibility to quickly address them. Watch this demo video to learn how ReliaQuest GreyMatter can increase visibility, decrease complexity and reduce risks driving better outcomes […]

Tags1 Notifications

Threat Research Report: Ransomware Advisory

Ransomware has become one of the most popular and destructive attacks in cyber security in recent years. Instead of stealing data as in most other attacks, the goal of ransomware is to hold the user’s data hostage by making it unusable until a ransom fee is paid. This is accomplished by encrypting the victim’s machine […]

Tags1 Notifications

Threat Research Report: Hafnium Exchange Zero-Days

On March 2, 2021, Microsoft Security Response Center released updates related to vulnerabilities affecting on-premises deployments of Microsoft Exchange Server 2013/2016/2019. Microsoft also revealed details around active exploitation of these vulnerabilities using zero-day exploits. This RQ Threat Advisory outlines the vulnerability and its exploitation in more detail including IoCs (indicators of compromise) and GreyMatter detection […]

Tags7 Notifications

ReliaQuest GreyMatter

ReliaQuest GreyMatter is a SaaS-based, unified threat detection, investigation and response platform that integrates and improves an enterprise’s on premise and multi-cloud technologies. GreyMatter saves security teams valuable time and increases effectiveness by enabling automatic and continuous threat detection, threat hunting, and remediation. More than 250 Global 2000 enterprises rely on ReliaQuest.

Tags2 Notifications

Detect Solorigate and SUNBURST Attacker Techniques with the MITRE ATT&CK Framework—We’ll Get You Started

As folks are continuing to work to address the Solorigate/ SUNBURST compromise, our team has been mapping the tactics and techniques used by the attackers to the MITRE ATT&CK framework, and building detection content to deploy for our customers.  If you haven’t already, please read this blog first to get the basics. What follows is […]

Tags1 Notifications

Solorigate, SUNBURST aka FireEye and SolarWinds Compromise – Recommended Actions to Limit Your Exposure

Threat Advisory On December 13th, a disclosure was made for a compromise in the SolarWinds IT Management software suite code base that made a supply chain attack possible for all SolarWinds customers. Attackers implanted backdoors in legitimate, signed DLL files contained in update packages for SolarWinds Orion in March and June of 2020 that were then used to breach customers who upgraded to the affected versions (versions 2019.4 HF 5 […]

No results