%term

Threat Hunting Fundamentals: Why Network Data Should Be At Core of Your Process

Apr 17, 2023 By Corelight In Corelight

Speakers: AJ Nurcombe (Corelight), Brandon Dunlop (ISC2) Threat hunting is a challenge to get right, with many potential pitfalls. There are twenty different definitions for threat hunting and ten different ways to do it. Organisations vary from having zero presence in their threat hunting program to multiple full-time hunters, but unfortunately, they often miss many critical pieces. This webinar will cover the common oversights that organisations fall foul of as well as emphasising the importance of network evidence in your threat hunting framework.

View Video

Corelight

Read more about Threat Hunting Fundamentals: Why Network Data Should Be At Core of Your Process

Behind the Curtain: Falcon OverWatch Hunting Leads Explained

Apr 17, 2023 By Falcon OverWatch Team In CrowdStrike

Most hunting enthusiasts agree that the thrill of hunting lies in the chase. Equipped with experience and tools of their trade, hunters skillfully search for signs of prey — a broken twig, a track in the mud. CrowdStrike® Falcon OverWatch™ threat hunters are no different. They search for signs of their prey — of adversaries lurking in the dark — and these signs are called hunting leads.

Read Post

CrowdStrike

Read more about Behind the Curtain: Falcon OverWatch Hunting Leads Explained

How Advanced Continual Threat Hunting Takes MDR and Cybersecurity to the Next Level

Apr 14, 2023 By Trustwave In Trustwave

When researching which managed detection and response (MDR) service provider to partner with, security professionals would do well to consider whether the provider also has experience with threat hunting, a topic we covered in a previous post. As with MDR, however, threat hunting offerings can vary dramatically, and an innovative, human-led form promises significant gains in terms of cyber protection: advanced continual threat hunting.

Read Post

Trustwave

Read more about How Advanced Continual Threat Hunting Takes MDR and Cybersecurity to the Next Level

Why Threat Hunting is Crucial to a Managed Detection and Response Service

Apr 7, 2023 By Trustwave In Trustwave

Managed detection and response (MDR) is justifiably one of the fastest-growing areas of cybersecurity, with Gartner estimating 50 percent of organizations will be using MDR services by 2025. But in choosing an MDR service, security pros should take into consideration what kind of expertise the provider can bring to bear – and how that expertise should extend beyond the MDR service itself.

Read Post

Trustwave

Read more about Why Threat Hunting is Crucial to a Managed Detection and Response Service

Using Workflow Actions & OSINT for Threat Hunting in Splunk

Apr 3, 2023 By Ryan Kovar In Splunk

Picture yourself, a threat hunter using Splunk, and the words "workflow action" are uttered by your helpful security Splunker... Workflow actions make you a faster and more effective security analyst. They allow you to skip the laborious steps of logging into various websites to do your job and just get straight to business.

Read Post

Splunk

Read more about Using Workflow Actions & OSINT for Threat Hunting in Splunk

How Continuous Threat Hunting Addresses Potential Okta Password Exposure Via Failed Login Attempts

Mar 27, 2023 By Leonid Belkind In Torq

Last week, the incident response firm Mitiga published research outlining the potential exposure of Okta passwords of organizational users. The method involves a mistaken entry of one’s password in the username field in an Okta login interface – something that, according to the research, is not an infrequent occurrence.

Read Post

Torq

Read more about How Continuous Threat Hunting Addresses Potential Okta Password Exposure Via Failed Login Attempts

CrowdStrike Falcon OverWatch Insights: 8 LOLBins Every Threat Hunter Should Know

Mar 7, 2023 By Falcon OverWatch Team In CrowdStrike

After dissecting a full year’s worth of interactive intrusion data, the CrowdStrike® Falcon OverWatch™ Elite team has identified the most commonly abused living-off-the-land binaries — and distilled the critical insights that defenders need to know to protect their organizations against the misuse of these binaries.

Read Post

CrowdStrike

Read more about CrowdStrike Falcon OverWatch Insights: 8 LOLBins Every Threat Hunter Should Know

Threat Hunting vs. Threat Detecting: Two Approaches to Finding & Mitigating Threats

Feb 21, 2023 By Guest In Splunk

Threat hunting and detection are two major prevention strategies in modern cybersecurity systems. Both strategies help identify potential threats to the organizations — though they take different approaches to threat identification. This article explains the difference between threat hunting and detection, so you know what to focus on for your organization’s cybersecurity strategy.

Read Post

Splunk

Read more about Threat Hunting vs. Threat Detecting: Two Approaches to Finding & Mitigating Threats

The Genesis of Trustwave's Advanced Continual Threat Hunt

Feb 1, 2023 By Trustwave In Trustwave

Trustwave’s recent revamp of its Advanced Continual Threat Hunt (ACTH) platform was inspired by the need to scale to meet a growing client base amid an ever-increasing threat landscape. Now with a patent-pending methodology, the SpiderLabs Threat Hunt team can conduct significantly more hunts and has an unprecedented ability to find more threats.

Read Post