Anton on Security

JANUARY 18, 2024

New Paper: “Future of the SOC: Evolution or Optimization — Choose Your Path” (Paper 4 of 4.5) New Paper: “Future of the SOC: Evolution or Optimization — Choose Your Path” (Paper 4 of 4.5) New Paper: “Future of the SOC: Evolution or Optimization — Choose Your Path” (Paper 4 of 4.5)

Technology 130

Technology Risk Architecture 130

Anton on Security

AUGUST 30, 2021

As you are reading our recent paper “Autonomic Security Operations?—?10X 10X Transformation of the Security Operations Center” , some of you may think “Hey, marketing inserted that 10X thing in there.” Does this remind you of SOC analyst work? But before we go there: where is that 10X?

Engineering 273

Engineering Marketing Education Threat Detection 273

The Last Watchdog

OCTOBER 23, 2023

Cisco’s $28 billion acquisition of Splunk comes at an inflection point of security teams beginning to adopt to working with modern, cloud-native data lakes. Related: Dasera launches new Snowflake platform For years, Splunk has been the workhorse SIEM for many enterprise Security Operation Centers (SOCs).

Architecture 261

Architecture Threat Detection Engineering Data collection 261

Anton on Security

DECEMBER 22, 2020

New Paper: “Future of the SOC: SOC People?—?Skills, Deloitte Security Operations Center (SOC) paper titled “Future of the SOC: Forces shaping modern security operations” ( launch blog , paper PDF ) and promised a series of three more papers covering SOC people, process and technology.

Technology 246

Technology 246

Security Boulevard

MAY 17, 2024

In April, the team discussed threat intelligence, vulnerabilities and trends, security operations center (SOC) engineering insights, threat hunting, and detection engineering. The post Novel Threat Tactics, Notable Vulnerabilities, and Current Trends for April 2024 appeared first on Security Boulevard.

Engineering 59

Engineering Cybersecurity 59

Anton on Security

APRIL 7, 2022

Cloud Security Podcast by Google?—?Popular Data security “Data Security in the Cloud“ “Modern Data Security Approaches: Is Cloud More Secure?” Popular Episodes by Topic This is simply a post that categorizes our podcast episodes by topic and then by download/listen count.

Cloud Migration 189

Cloud Migration Threat Detection CISO Engineering 189

Anton on Security

NOVEMBER 17, 2022

This sounds abstract and philosophical, how can it help my SOC today? So, yes, this is a big part of why security is fun, but also tricky. Phil’s 8 megatrends blog reminds us about this by calling one of his cloud megatrends “Simplicity: Cloud as an abstraction machine.” and security issues are often rooted in surprise.”

Engineering 100

Engineering Software Data collection Architecture 100

Security Boulevard

SEPTEMBER 16, 2021

Sometimes great old blog posts are hard to find (especially on Medium ), so I decided to do a periodic list blog with my favorite posts over the past quarter. This covers both Anton on Security and my posts from Google Cloud blog , and now our Cloud Security Podcast too! Beware: Clown-grade SOCs Still Abound””.

Threat Detection 52

Threat Detection Cloud Migration Encryption Engineering 52

Anton on Security

JULY 21, 2021

New Paper: “Autonomic Security Operations?—?10X 10X Transformation of the Security Operations Center” It is with much excitement that we announce a new paper about transforming your security operations ; it is published under the Office of the CISO at Google Cloud. What is the “O” in SOC?

System Administration 113

System Administration Engineering CISO Technology 113

Anton on Security

AUGUST 31, 2022

First, we need to address the elephant in the room, ahem, in the SOC. Namely, people who hear about “release engineering” and say: my SOC neither releases nor engineers. So, how can people who think their SOC does not “release” anything because “we just use alerts spawned by rules from somebody else” learn from the SREs here?

Engineering 189

Engineering Risk 189

Security Boulevard

JANUARY 4, 2024

In November, the team discussed notable vulnerabilities and trends, gave a crash course on security operations center (SOC) metrics, and provided insights on a recent SOC engineering exercise. The post Insights into SOC metrics, recent SOC Engineering Exercises, and more appeared first on Pondurance.

Engineering 59

Engineering Cybersecurity 59

Security Boulevard

DECEMBER 8, 2023

In recent weeks, coincidentally, I’ve had several conversations that reminded me about the confusion related to “modern SOC.” One particular person went on a quest through several “leading” companies’ security operations to see how they have implemented a “modern” SOC. long story, probably Part 3 of this blog :-)].

Engineering 64

Engineering Phishing 64

IT Security Central

APRIL 7, 2022

Working in a Security Operations Center (SOC) is like working in an emergency room on a weekend shift at 2 AM. The post Training Will Be Key to Retaining SOC Analysts first appeared on IT Security Central - Teramind Blog.

Information Security 83

Information Security 83

Anton on Security

SEPTEMBER 16, 2021

Sometimes great old blog posts are hard to find (especially on Medium ), so I decided to do a periodic list blog with my favorite posts over the past quarter. This covers both Anton on Security and my posts from Google Cloud blog , and now our Cloud Security Podcast too! Here is the next one. Now, posts by topic.

Threat Detection 42

Threat Detection Cloud Migration Encryption Engineering 42

Security Boulevard

JANUARY 18, 2024

New Paper: “Future of the SOC: Evolution or Optimization — Choose Your Path” (Paper 4 of 4.5) New Paper: “Future of the SOC: Evolution or Optimization — Choose Your Path” (Paper 4 of 4.5) New Paper: “Future of the SOC: Evolution or Optimization — Choose Your Path” (Paper 4 of 4.5)

Technology 59

Technology Risk Architecture Government 59

Security Boulevard

APRIL 5, 2022

A security operations center (SOC) serves specific and important functions in strengthening the cybersecurity defenses of any organization. SOC as a Service (SOCaaS) uses a different…. The post A Beginner’s Guide to SOCaaS appeared first on Security Boulevard.

Security Awareness 111

Security Awareness Risk Cybersecurity 111

Security Boulevard

NOVEMBER 17, 2022

This sounds abstract and philosophical, how can it help my SOC today? So, yes, this is a big part of why security is fun, but also tricky. Phil’s 8 megatrends blog reminds us about this by calling one of his cloud megatrends “Simplicity: Cloud as an abstraction machine.” and security issues are often rooted in surprise.”.

Engineering 64

Engineering Software Data collection Architecture 64

Security Boulevard

DECEMBER 15, 2022

Lawson and Coulehan have been partnering together for almost three years to transform the City’s cybersecurity initiatives and Security Operations Center (SOC). . The post Video: Modernizing Phoenix’s Cybersecurity to Combat Nation-State Attacks appeared first on Security Boulevard.

Cybersecurity 98

Cybersecurity CISO CSO Threat Detection 98

Trend Micro

DECEMBER 12, 2021

By examining Purple Fox’s routines and activities, both with our initial research and the subject matter we cover in this blog post, we hope to help incident responders, security operation centers (SOCs), and security researchers find and weed out Purple Fox infections in their network.

Malware 70

Malware 70

Anton on Security

FEBRUARY 26, 2021

Those who follow me on social media already knows this, but we have launched THE Cloud Security Podcast. The whole story from our GCP blog is cross-posted below: Security continues to be top of mind for large enterprises as well as smaller organizations and businesses. You can also download the episodes directly here.

Cloud Migration 100

Cloud Migration Network Security Banking Media 100

Anton on Security

MAY 13, 2021

A few days ago we did a very well-attended webinar focused on the modern Security Operations Center (SOC) approach (see “Trend for the Modern SOC” for a replay link). We got a lot of great questions, and just like in the good old times , I am writing a blog where I cover some of the answers. Outside USA?

Risk 100

Risk Threat Detection Technology Cybersecurity 100

Security Boulevard

AUGUST 31, 2022

First, we need to address the elephant in the room, ahem, in the SOC. Namely, people who hear about “release engineering” and say: my SOC neither releases nor engineers. So, how can people who think their SOC does not “release” anything because “we just use alerts spawned by rules from somebody else” learn from the SREs here?

Engineering 98

Engineering Risk Government Network Security 98

Security Boulevard

JULY 21, 2021

Security Operations Center (SOC) analysts use each of these approaches to varying degrees of effectiveness in Cybersecurity applications. Security Operations Center (SOC) analysts use each of these approaches to varying degrees of effectiveness in Cybersecurity applications.

Cybersecurity 111

Cybersecurity Banking Cyber threats 111

Security Boulevard

DECEMBER 21, 2021

As we discussed in “Achieving Autonomic Security Operations: Reducing toil” (or it’s early version “Kill SOC Toil, Do SOC Eng” ), your Security Operations Center (SOC) can learn a lot from what IT operations learned during the SRE revolution. evolving automation. evolving automation.

Engineering 69

Engineering Phishing Technology Ransomware 69

Security Boulevard

JANUARY 10, 2022

New Paper: “Future Of The SOC: Process Consistency and Creativity: a Delicate Balance” (Paper 3 of 4). Sorry, it took us a year (long story), but paper #3 in Deloitte/Google collaboration on SOC is finally out. Enjoy “Future Of The SOC: Process Consistency and Creativity: a Delicate Balance” [PDF].

Engineering 72

Engineering Technology Risk Government 72

The Last Watchdog

FEBRUARY 7, 2023

Another report by Vade completed last year found that 87 percent of respondents agreed their organization could take the threat from email security more seriously. Secure email gateways (SEGs) are a common solution used by businesses both large and small to analyze emails for malicious content before they’re able to reach corporate systems.

Small Business 222

Small Business Technology Cyber Attacks Cybersecurity 222

Security Boulevard

FEBRUARY 24, 2021

If you haven't read our 2021 Cybersecurity predictions blog and whitepaper , I recommend that you do. In it, you'll find one prediction that might be somewhat controversial—the death of the Security Operations Center (SOC). I run IntelliGO's Threat Hunting team and what would historically have been called our SOC.

Technology 59

Technology Cybersecurity 59

Security Boulevard

SEPTEMBER 28, 2022

The latest release of Netography Fusion provides much more functionality and an improved customer experience for security operations center (SOC) and cloud operations teams. The post Netography Fusion Advances Network Security and Visibility with Multiple Updates appeared first on Netography.

Network Security 52

Network Security 52

CyberSecurity Insiders

OCTOBER 11, 2021

Stories from the SOC is a blog series that describes recent real-world security incident investigations conducted and reported by the AT&T SOC analyst team for AT&T Managed Threat Detection and Response customers. The post Stories from the SOC – Data exfiltration appeared first on Cybersecurity Insiders.

Threat Detection 122

Threat Detection Cybersecurity Malware Cyber threats 122

Security Boulevard

FEBRUARY 25, 2021

If you haven't read our 2021 Cybersecurity predictions blog and whitepaper , I recommend that you do. In it, you'll find one prediction that might be somewhat controversial—the death of the Security Operations Center (SOC). I run IntelliGO's Threat Hunting team and what would historically have been called our SOC.

Technology 52

Technology Cybersecurity 52

Security Boulevard

AUGUST 19, 2021

For many organizations, the SOC is their “first line of defense” A Security Operations Center (SOC) can be defined as a centralized team within an organization that monitors the information technology environment for incidents and provides direct support of the cybersecurity incident response process.

Technology 52

Technology Cybersecurity InfoSec 52

Security Boulevard

AUGUST 30, 2021

As you are reading our recent paper “Autonomic Security Operations?—?10X 10X Transformation of the Security Operations Center” , some of you may think “Hey, marketing inserted that 10X thing in there.”. Does this remind you of SOC analyst work? Well, it is an exact match, no need to write any regexes here….

Engineering 59

Engineering Marketing Education Threat Detection 59

Security Boulevard

APRIL 7, 2022

Cloud Security Podcast by Google?—?Popular Data Security in the Cloud“. Security Operations Center (SOC). SOC in a Large, Complex and Evolving Organization”. EP58 SOC is Not Dead: How to Grow and Develop Your SOC for Cloud”. Threat Detection at Google Cloud Security Summit”.

Cloud Migration 52

Cloud Migration Threat Detection CISO Engineering 52

Security Boulevard

FEBRUARY 26, 2021

Those who follow me on social media already knows this, but we have launched THE Cloud Security Podcast. The whole story from our GCP blog is cross-posted below: Security continues to be top of mind for large enterprises as well as smaller organizations and businesses. You can also download the episodes directly here.

Cloud Migration 52

Cloud Migration Network Security Banking Media 52

McAfee

MARCH 9, 2021

In a Security Operations Center (SOC) this resource is serving as a progressive framework for practitioners to make sense of the behaviors (techniques) leading to system intrusions on enterprise networks. MITRE ATT&CK enterprise is a “knowledge base of adversarial techniques ”.

Marketing 81

Marketing Ransomware Malware Risk 81

Anton on Security

FEBRUARY 5, 2024

If you are like us, you may be surprised that, in 2024, traditional security information and event management (SIEM) systems are still the backbone of most security operations centers (SOC). That’s where this blog comes in. This question is inextricably linked to cost.

Threat Detection 100

Threat Detection Engineering Artificial Intelligence Risk 100

Security Affairs

MAY 4, 2023

The City confirmed the security incident and is working to recover from the ransomware attack that impacted its services, including the police department. The incident may cause delays for online payment processing operated by Dallas Water Utilities. ” reported the website of Fox4News.

Ransomware 92

Ransomware Healthcare Education Encryption 92