Managed Security Services Archives

Alert Advisory, Malware Protection, Managed Security Services

The Emotet Botnet Epoch4: A Highly Sophisticated and Dangerous Malware Campaign

Emotet is one of the most sophisticated and dangerous malware families currently in existence. It is a modular banking Trojan […]

Advanced Persistent Threat, Alert Advisory, Cyber Security, Incident Response, Managed Security Services, Managed SOC Services

Alert Advisory: Insight into APT42

APT42 is a state-sponsored cyber espionage group in Iran. The gang, which has been active at least since 2015, is […]

Alert Advisory, Incident Response, Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting, XDR

Alert Advisory: New Microsoft Exchange Zero-Days

Late on September 29, 2022, Microsoft acknowledged both zero-day vulnerabilities and stated that they were aware of “limited, targeted attacks […]

Cyber Security, Managed Security Services, Managed SOC Services

Usage of NPPSpy

Extracting Windows credentials from Domain based hosts is one of the common attack techniques hackers use to obtain user credentials […]

Cyber Security, Cyber Threat Intelligence, Machine Learning, Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting, Threat Intelligence

Data Exfiltration and Detection through Anomaly Detection

Data exfiltration is the unauthorised transfer of critical and sensitive data and/or information from a targeted network to the cyber […]

Cyber Security, Machine Learning, Managed Security Services, Managed SOC Services

DGA Detection Using Machine Learning

Domain Generation algorithm (DGA) is an automation technique used by cyber attackers for a variety of attacks like Data exfiltration, […]

Malware Protection, Managed Security Services, Managed SOC Services

Wiper Malware – What is it and How to Detect?

In the world of different malware types and strains, the most disruptive malware type besides ransomware might be Wiper malware. […]

Cyber Security, Managed Security Services, Managed SOC Services, Security Operations Center

Using Windows Event Forwarding for Centralized Windows Monitoring – Part 3

Reading security logs requires a higher level of permission that other logs. Below are the steps to configure the right […]

Cyber Security, Managed Security Services, Managed SOC Services, Security Operations Center

Using Windows Event Forwarding for Centralized Windows Monitoring – Part 2

From a security perspective, generally, it would be better to allow communication from user segments to outside rather than from […]

Cyber Security, Cyber Threat Management, Managed Security Services, Managed SOC Services, Security Operations Center

Cyber Threat Management with MITRE ATT&CK – Part 1

Let’s agree on this first, job of a SOC analyst is TOUGH, as tough as finding a needle in a […]

Managed Security Services, Managed SOC Services, Security Operations Center

What is SOC beyond a Monitoring Center?

Managed SOC / CSOC (aka Cyber Security Operations Center) is often regarded as the workplace where the nerdy information security […]

Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting

The Basics of Threat Hunting

Forms of Threat Hunt The truth is that threat hunt end goal plays an important role in the whole classification […]

Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting, Threat Modeling

A Threat Hunt Tale

The human domain is complex and unpredictable, and as a result the logic behind certain behaviors are also complex. The […]

Managed Security Services, Managed SOC Services, Security Operations Center, Threat Modeling

Threat Modeling Recipe for a State-of-the-Art SOC

Today, every security expert agrees that we are in the middle of a cyber warfare walking right across a mine […]