September 2022 - HawkEye

Breach Detection, Cyber Security, Managed SOC Services

Recent Uber Breach and Lessons Learnt

Uber acknowledged reports of a widespread cybersecurity compromise on September 15th. The security investigation found that the company’s system had […]

Cyber Security, Managed Security Services, Managed SOC Services

Usage of NPPSpy

Extracting Windows credentials from Domain based hosts is one of the common attack techniques hackers use to obtain user credentials […]

Cyber Security, Machine Learning, Malware Protection, Managed SOC Services

Malware Evasion Techniques and Recommendations for Threat Protection

Malware evasion methods are frequently employed to evade detection, analysis, and comprehension. Due to the fact that sandboxes are now […]

Cyber Security, Cyber Threat Intelligence, Machine Learning, Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting, Threat Intelligence

Data Exfiltration and Detection through Anomaly Detection

Data exfiltration is the unauthorised transfer of critical and sensitive data and/or information from a targeted network to the cyber […]

Cyber Security, Machine Learning, Managed Security Services, Managed SOC Services

DGA Detection Using Machine Learning

Domain Generation algorithm (DGA) is an automation technique used by cyber attackers for a variety of attacks like Data exfiltration, […]

Cyber Security, Machine Learning, Managed SOC Services, UEBA

Augmenting Traditional UEBA with ML and Deep Learning

User and entity behavior analytics (UEBA) is a threat detection technology that is based on analytics. UEBA employs machine learning […]

Cyber Security, Security Operations Center

Tools Used for Dumping of RDPCreds via comsvcs.dll

Remote Desktop Protocol (RDP) is commonly used by administrators to manage Windows environments remotely. It is also typical for RDP […]

Cyber Security, Managed SOC Services, Security Operations Center

Sniffing Attacks – Packet Capture Techniques Used by Attackers

Sniffing attacks are data thefts caused by capturing network traffic with packet sniffers, which can illegally access and read unencrypted […]

Cyber Security, Managed SOC Services, Security Operations Center

LSASS Dumping Techniques

Local Security Authority Subsystem Service (LSASS) is the process on Microsoft Windows that handles all user authentication, password changes, creation […]

Recent Uber Breach and Lessons Learnt

Usage of NPPSpy

Malware Evasion Techniques and Recommendations for Threat Protection

DGA Detection Using Machine Learning

Augmenting Traditional UEBA with ML and Deep Learning

Tools Used for Dumping of RDPCreds via comsvcs.dll

Sniffing Attacks – Packet Capture Techniques Used by Attackers

LSASS Dumping Techniques

Ready to get started?

Ready to get started?

HawkEye

Packages

CSOC

Explore