Managed SOC Dubai Archives - Page 2 of 3

Cyber Security, Machine Learning, Malware Protection, Managed SOC Services

Malware Evasion Techniques and Recommendations for Threat Protection

Malware evasion methods are frequently employed to evade detection, analysis, and comprehension. Due to the fact that sandboxes are now […]

Cyber Security, Machine Learning, Managed SOC Services, UEBA

Augmenting Traditional UEBA with ML and Deep Learning

User and entity behavior analytics (UEBA) is a threat detection technology that is based on analytics. UEBA employs machine learning […]

Cyber Security, Security Operations Center

Tools Used for Dumping of RDPCreds via comsvcs.dll

Remote Desktop Protocol (RDP) is commonly used by administrators to manage Windows environments remotely. It is also typical for RDP […]

Cyber Security, Managed SOC Services, Security Operations Center

Sniffing Attacks – Packet Capture Techniques Used by Attackers

Sniffing attacks are data thefts caused by capturing network traffic with packet sniffers, which can illegally access and read unencrypted […]

Cyber Security, Managed SOC Services, Security Operations Center

LSASS Dumping Techniques

Local Security Authority Subsystem Service (LSASS) is the process on Microsoft Windows that handles all user authentication, password changes, creation […]

Cyber Security, Reconnaissance Tools

Common Reconnaissance Tools Used by Threat Actors

Reconnaissance consists of techniques that involve adversaries actively or passively gathering information that can be used to support targeting. Background […]

Cyber Security, Managed SOC Services, XDR

DNS Tunneling and Countermeasures in an Enterprise

DNS tunneling is one of the significant threats that an organization faces when it comes to attacker tactics and techniques […]

Alert Advisory, Cyber Security, Managed SOC Services, Ransomware Protection, Security Operations Center, XDR

Alert Advisory: Analysis of BlackCat Ransomware

BlackCat, also known as ALPHV-ng, ALPHV, and Noberus, is a Ransomware-as-a-Service (RaaS) threat that targets organizations across multiple sectors worldwide […]

Ransomware Protection

Ransomware Detection Using Machine Learning

Gone are the days of manual security analysis that cyber security teams used to perform to track down and stop […]

Compromise Assessment, Ransomware Protection

How to Detect Ransomware Early

The proliferation of ransomware attacks in the past decade has brought many challenges to companies and cyber security teams worldwide. […]

Cyber Security, DARKINT, EDR, OSINT, SIEM, Threat Intelligence, Vulnerability Assessment, XDR

CSOC Analysts Cybersecurity Toolkit Arsenal

It is safe to say that organizations worldwide have different infrastructure setups, technology, software, and different network architecture types. No […]

Managed SOC Services, Security Operations Center, XDR

XDR Software – The Journey Beyond

We are still in the early days of the XDR (eXtended Detection and Response) era, understanding XDR technology in the […]

Managed SOC Services, Security Operations Center

How Threat Actors Steal Your Data with Reverse Tunnelling

Reverse tunnelling is a technique used to ‘sneak into’ a secured network by hiding applications within traffic which originates from […]

Cyber Security, Managed Security Services, Managed SOC Services, Security Operations Center

Using Windows Event Forwarding for Centralized Windows Monitoring – Part 3

Reading security logs requires a higher level of permission that other logs. Below are the steps to configure the right […]

Cyber Security, Managed Security Services, Managed SOC Services, Security Operations Center

Using Windows Event Forwarding for Centralized Windows Monitoring – Part 2

From a security perspective, generally, it would be better to allow communication from user segments to outside rather than from […]

Cyber Security, Managed SOC Services, Security Operations Center

Using Windows Event Forwarding for Centralized Windows Monitoring – Part 1

Staying on top of cyber threats in your environment could be challenging even with a lot of protective measures in […]

Azure Sentinel

Deep-dive into Azure Sentinel – Part 2 – Data Collection and Processing

From our experience in deploying various SIEM platform, we would rank Azure sentinel number one when it comes to the […]

Azure Sentinel

Deep-dive into Azure Sentinel – Part 1 – Introduction to Sentinel as a SIEM

You might have heard of the North Sentinel Island in the middle of Bay of Bengal that hosts the most […]

Managed SOC Services, Security Operations Center, Security Orchestration, SOAR

SOAR Features and Use Cases

Organizations are getting bigger and bigger and, because of that a lot of events, activities and data are being generated […]

Cyber Threat Intelligence, Managed SOC Services

Dark Web and Threat Intelligence (DARKINT)

Security researchers and Cybersecurity professionals have an immense interest in discovering threat intelligence on the deep web and darknet. This […]

Cyber Security, Incident Response

Ransomware Incident Response Plan – Part 2

Ransomware was and still is one of the most dangerous attacks that can cause catastrophic consequences to the endpoint system […]

Cyber Security, Incident Response

Ransomware Incident Response Plan – Part 1

Ransomware was and still is one of the most dangerous attacks that can cause catastrophic consequences to the endpoint system […]

Cyber Security, Cyber Threat Intelligence, Security Operations Center

Cyber Threat Intelligence and OSINT

We are living in a world where any number of cyber threats can bring an organization to its knees and […]

Cyber Security, Incident Response

12 Steps to Secure Your Organization’s Office 365 Accounts Effectively

Recently, our Incident response team at HAWKEYE received a frantic call from one of our clients saying that their o365 […]

Malware Evasion Techniques and Recommendations for Threat Protection

Augmenting Traditional UEBA with ML and Deep Learning

Tools Used for Dumping of RDPCreds via comsvcs.dll

Sniffing Attacks – Packet Capture Techniques Used by Attackers

LSASS Dumping Techniques

Common Reconnaissance Tools Used by Threat Actors

DNS Tunneling and Countermeasures in an Enterprise

Alert Advisory: Analysis of BlackCat Ransomware

Ransomware Detection Using Machine Learning

How to Detect Ransomware Early

CSOC Analysts Cybersecurity Toolkit Arsenal

XDR Software – The Journey Beyond

How Threat Actors Steal Your Data with Reverse Tunnelling

Using Windows Event Forwarding for Centralized Windows Monitoring – Part 3

Using Windows Event Forwarding for Centralized Windows Monitoring – Part 2

Using Windows Event Forwarding for Centralized Windows Monitoring – Part 1

Deep-dive into Azure Sentinel – Part 2 – Data Collection and Processing

Deep-dive into Azure Sentinel – Part 1 – Introduction to Sentinel as a SIEM

SOAR Features and Use Cases

Dark Web and Threat Intelligence (DARKINT)

Ransomware Incident Response Plan – Part 2

Ransomware Incident Response Plan – Part 1

Cyber Threat Intelligence and OSINT

12 Steps to Secure Your Organization’s Office 365 Accounts Effectively

Ready to get started?

Ready to get started?

HawkEye

Packages

CSOC

Explore