Universal Plugins for AWS October 12, 2021 For customers that run their infrastructure on AWS cloud and would like to ingest logs from various... Read More
Behavioral Indicators Helpful to Detect Ransomware Activity October 11, 2021 A couple of weeks back, I was delivering a presentation. During this session I mentioned that if... Read More
PetitPotam NTLM Relay Attack September 21, 2021 Introduction Lionel Gilles, a French-based Offensive Computer Security researcher at Sogeti, an IT... Read More
AWS CloudTrail - Anomalous Activity Detection Threat Content September 14, 2021 AWS CloudTrail is an AWS service that helps in governance, compliance and operational risk auditing... Read More
NetWitness Threat Detection Content Report - September 2021 September 9, 2021 NetWitness announces the release of the following threat content and publications: Blog Posts ... Read More
RSA Netwitness Threat Content Coverage Breakdown for Top MITRE ATT&CK® Techniques August 25, 2021 A week ago, we released MITRE ATTCK® Coverage Breakdown for RSA Netwitness Threat Content with ‘... Read More
NetWitness Endpoint Meta Primer August 16, 2021 The NetWitness Endpoint meta schema, while fully accessible, has remained a mostly opaque and... Read More
Ransomware: A Beginner’s Guide to a Major Threat August 5, 2021 If you have followed the news over the first half of 2021, you’ve certainly been bombarded by the... Read More
MITRE ATT&CK® Coverage Breakdown for RSA Netwitness Threat Content July 19, 2021 MITRE ATT&CK® is a globally accessible knowledge base of adversary tactics and techniques based on... Read More
Detecting and Responding to Kaseya Ransomware with the NetWitness Platform July 16, 2021 Attack logic Ransomware behavior The Zero-Day Vulnerabilities Crypter: REvil Ransomware REvil... Read More