Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Threat Hunting

How Threat Hunters Can Detect Scattered Spider Attacks and Related Intrusions

Cyberattacks are becoming more advanced, and groups like Scattered Spider are leading the way with their sophisticated techniques. This group is notorious for using social engineering methods like SIM swapping, voice phishing, and SMS phishing to trick employees into giving them access to sensitive systems. By pretending to be IT administrators, they bypass traditional security defenses, moving through networks unnoticed and stealing valuable data.

Enhancing Security Posture: What Is Threat Hunting?

Organizations that work in the cloud face an increasing number of potential threats every day. Fortunately, automated detection and response can block many of these lower-level threats before they even require human attention. Unfortunately, that means the threats that evade automated defenses may be perpetrated by driven and sophisticated attackers — the kinds of threat actors who can infiltrate a system and remain undetected for up to 280 days on average.

Staying Ahead of the Threat Landscape with Automated Detection and Threat Hunting

Few industries evolve as rapidly as technology—and the world of cybercrime is no exception. While businesses may hesitate to adopt new technologies due to regulatory pressures or security concerns, threat actors in the cybercrime space – who are free from ethical scruples or legal worries – are constantly innovating. This trend has only accelerated with the rise of Generative AI, which has democratized cybercrime by enabling attackers of all skill levels to launch sophisticated attacks.

Threat Hunting: Strategic Approaches and Capabilities to Uncover Hidden Threats

Threat hunting is the discovery of malicious artifacts, activity or detection methods not accounted for in passive monitoring capabilities. Essentially, threat hunting is the process of identifying unknown threats that otherwise would be hiding in your network and on your endpoints, lying in wait to further expand access and/or steal sensitive data.

Threat Hunting in macOS with the SecOps Cloud Platform

The second most popular OS in today’s business environment, macOS, is often neglected in cybersecurity discussions. This is likely due to Windows OS holding a dominant share (72.1%) of the global workstation market and Linux (4.03%) running critical parts of IT infrastructure. This often leaves macOS excluded from the conversation.

Threat Hunting for macOS, Part Two

In part 1 of our Threat Hunting for macOS webinar series we explored basic use cases for utilizing macOS Unified Logging (MUL) and system telemetry to uncover suspicious behavior. Building upon this foundation, in part two we explore more intricate use cases and tap into third-party logs to uncover sophisticated attack TTPs.

Cloudy with a chance of breach: advanced threat hunting strategies for a hyperconnected and SaaSy world

When workloads moved to the cloud, a huge burden was lifted from the enterprise in infrastructure and operational overhead. This transition also brought with it the “shared responsibility” model, where cloud providers took on much of the responsibility previously relegated to expensive engineering teams.