This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
This post is a somewhat random exploration of the cloud shared responsibility model relationship to cloudthreatdetection. Funny enough, some popular shared responsibility model visuals don’t even include detection, response or security operations. Related blogs: “Why is ThreatDetection Hard?” “On
Dall-E security bloggingimage Top 10 posts with the most lifetime views (excluding paper announcement blogs, Medium postsonly): Security Correlation Then and Now: A Sad Truth AboutSIEM Can We Have Detection asCode? A SOC Tried To DetectThreats in the Cloud You Wont Believe What HappenedNext Top 10 SIEM Log Sources in Real Life?
Skills, Not Tiers” “Beware: Clown-grade SOCs Still Abound”” “Revisiting the Visibility Triad for 2020” Top 5 posts with the most Medium fans : “Security Correlation Then and Now: A Sad Truth About SIEM” “Beware: Clown-grade SOCs Still Abound” “Can We Have “Detection as Code”?” “Why Why Is ThreatDetection Hard?” “A
Skills, Not Tiers” “Beware: Clown-grade SOCs Still Abound”” “New Paper: “Future of the SOC: Forces shaping modern security operations”” Top 5 posts with the most Medium fans : “Security Correlation Then and Now: A Sad Truth About SIEM” “Beware: Clown-grade SOCs Still Abound” “Can We Have “Detection as Code”?” “Why Now, posts by topic.
“Why Is ThreatDetection Hard?” “A Episode 17 “Modern ThreatDetection at Google” Random fun new posts: “Anton and The Great XDR Debate, Part 3” “Left of SIEM? Security operations / detection & response: “Security Correlation Then and Now: A Sad Truth About SIEM” “Can We Have “Detection as Code”?”
Beware: Clown-grade SOCs Still Abound DetectionEngineering is Painful — and It Shouldn’t Be (Part 1) [now a 10 post series, not yet finished…] Why is ThreatDetection Hard? Revisiting the Visibility Triad for 2020” “ Beware: Clown-grade SOCs Still Abound ” “Why is ThreatDetection Hard?” “A
SOAR uses the output of detectionengines and investigations and recommends workflows or playbooks to build a response plan, saving time and effort. Early SIEMs were log management and compliance tools, they were never built to address real-time threatdetection and response.
“New Paper: “Future of the SOC: SOC People — Skills, Not Tiers” ” “Revisiting the Visibility Triad for 2020” “A SOC Tried To DetectThreats in the Cloud … You Won’t Believe What Happened Next” “Why is ThreatDetection Hard?” Why Is ThreatDetection Hard?” Is Your Fate In the Cloud?”
This post is a somewhat random exploration of the cloud shared responsibility model relationship to cloudthreatdetection. Funny enough, some popular shared responsibility model visuals don’t even include detection, response or security operations. Anton’s CloudThreatDetection Table.
Let’s continue our fun conversation on threatdetection in the cloud that we started in “Who Does What In CloudThreatDetection?” and “How to Think about ThreatDetection in the Cloud” and continued somewhat in “Detection as Code? No, Detection as COOKING!” and growing?—?telemetry
Let’s continue our fun conversation on threatdetection in the cloud that we started in “Who Does What In CloudThreatDetection?” and “How to Think about ThreatDetection in the Cloud” and continued somewhat in “Detection as Code? No, Detection as COOKING!” and growing?—?telemetry
“Why Is ThreatDetection Hard?”. “A A SOC Tried To DetectThreats in the Cloud … You Won’t Believe What Happened Next”. Top 5 Cloud Security Podcast by Google episodes: Episode 1“Confidentially Speaking”. Episode 2 “Data Security in the Cloud”. Episode 17 “Modern ThreatDetection at Google”.
HEAT attacks leverage one or more of the following core techniques that bypass legacy network security defenses: Evades Both Static and Dynamic Content Inspection: HEAT attacks evade both signature and behavioral analysis engines to deliver malicious payloads to the victim using innovative techniques such as HTML Smuggling.
Despite cloud computing's two-decade presence, 38.9% of respondents identified cloud security as the most significant skills shortage. This revelation underscores a lag in expertise as organizations continue their cloudmigration journeys, potentially leaving them vulnerable to cloud-specific security threats.
Dall-E via Copilot, prompt “security blog quarterly, steampunk” Top 7 posts with the most lifetime views (excluding paper announcement blogs): Security Correlation Then and Now: A Sad Truth About SIEM Can We Have “Detection as Code”? How to Solve the Mystery of Cloud Defense in Depth?” Use Cloud Securely? “Use
Dall-E security bloggingimage Top 10 posts with the most lifetime views (excluding paper announcement blogs, Medium postsonly): Security Correlation Then and Now: A Sad Truth AboutSIEM Can We Have Detection asCode? A SOC Tried To DetectThreats in the Cloud You Wont Believe What HappenedNext Top 10 SIEM Log Sources in Real Life?
Group-IBDFIR team was brought in to examine an incident in an Asia-based company which allowed to establish that PerSwaysion is a sophisticated 3-phase phishing operation that uses special tactics and techniques to avoid detection. It stops any automated threatdetection efforts to URLs visited by the targets.
Can We Have “Detection as Code”?”. Why Is ThreatDetection Hard?”. “A A SOC Tried To DetectThreats in the Cloud … You Won’t Believe What Happened Next”. Top 5 Cloud Security Podcast by Google episodes: Episode 1“Confidentially Speaking”. Episode 17 “Modern ThreatDetection at Google”.
“Can We Have “Detection as Code”?”. Why Is ThreatDetection Hard?”. “A A SOC Tried To DetectThreats in the Cloud … You Won’t Believe What Happened Next”. Top 5 Cloud Security Podcast by Google episodes: Episode 1“Confidentially Speaking”. Episode 2 “Data Security in the Cloud”.
Conduct user awareness training: Incorporate a focused training program into onboarding and workflow process so employees can learn about social engineering strategies, phishing risks, and cloud security best practices. Skills gap relates to a scarcity of competent individuals with knowledge in cloudmigration.
Improved threatdetection and response times. Illumio Core stops attacks by delivering visibility, a policy creation engine, and automated segmentation and enforcement. Microsegmentation Benefits. Narrowed attack surface. Real-time alerts of policy violations. Blocking of unsanctioned activity.
Key Factors Driving Migration of Banks and Financial Institutions to the Cloud There are many cloudmigration factors in today’s business and customer landscape that are the driving force behind today’s financial institutions deciding to embrace cloud as a major part of their infrastructure.
Top 5 overall “Confidentially Speaking“ “Data Security in the Cloud“ “Zero Trust: Fast Forward from 2010 to 2021“ “The Mysteries of DetectionEngineering: Revealed! “ “Modern ThreatDetection at Google“ Security Operations Center (SOC) “SOC in a Large, Complex and Evolving Organization” “EP58 SOC is Not Dead: How to Grow and Develop Your SOC for Cloud” (..)
Why Is ThreatDetection Hard?” “A A SOC Tried To DetectThreats in the Cloud … You Won’t Believe What Happened Next” Top 5 Cloud Security Podcast by Google episodes: Episode 1“Confidentially Speaking” Episode 2 “Data Security in the Cloud” Episode 47 “Megatrends, Macro-changes, Microservices, Oh My!
“The Mysteries of DetectionEngineering: Revealed! “. Modern ThreatDetection at Google“. EP58 SOC is Not Dead: How to Grow and Develop Your SOC for Cloud”. Threatdetection (top 5). The Mysteries of DetectionEngineering: Revealed! “The Modern ThreatDetection at Google“.
Meta AI creation, steampunk theme Top 10 posts with the most lifetime views (excluding paper announcement blogs): Security Correlation Then and Now: A Sad Truth AboutSIEM Can We Have Detection asCode? DetectionEngineering is Painfuland It Shouldnt Be (Part1) Revisiting the Visibility Triad for 2020 (update for 2024 is coming soonBTW!)
We organize all of the trending information in your field so you don't have to. Join 28,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content