Protected Waters: No Spear Phishing Allowed
Blocking against all phishing attempts is costly, time intensive and arguably impossible. This paper will discuss how to get ahead of Phishing scams and the spear phisher’s infrastructure and techniques. …
SANS 2022 Top New Attacks and Threat Report
Historically, security managers had the challenge of convincing C-Suite leaders and boards of directors of existing or potential threats. While those days are not necessarily long-gone, the persistence of ransomware …
The 2022 Threat Hunting Report
The Evolution of Threat Hunting Threat hunting continues to evolve for organizations that focus on proactively detecting and isolating Advanced Persistent Threats (APTs) that might otherwise go undetected by traditional, …
Threat Intelligence Playbook: Making Sense of Indicators
In recent years, organizations around the world realized that a new era of cyber threats had dawned. Ransomware has advanced significantly and is now capable of taking out infrastructure and …
The Value of Threat Intelligence with DomainTools: Identify Threats 82% Faster
There is an increasing chasm between the number of qualified cybersecurity professionals and the number of people needed to fill those roles. DomainTools is a vendor that seeks to address …
SANS Top New Attacks and Threat Report
There are many places to find backward-looking statistics of how many attacks were launched in cyberspace. Forward-looking guidance areas that security managers should focus on are harder to find. In …
Conceptualizing a Continuum of Cyber Threat Attribution
Few topics in the field of Cyber Threat Intelligence (CTI) prompt as much passion and debate as the concept of threat attribution. From numerous conference talks, to blogs and papers, …
Comparing Images Such as Screenshots Using Perceptual Hashes
While investigating websites, analysts often acquire images, either as individual files from the sites or as screenshots (perhaps from Iris Investigate). The question is then “Can we identify images that …
2022 Elastic Global Threat Report
This Elastic Global Threat Report is a product of Elastic Security Labs, our threat research branch with expertise in investigating computer network intrusions, analyzing malicious software, developing mitigations for broad categories of threats, and c…
Email Encryption Best Practices
Email continues to be the lifeblood of organizations. With changes to legislation and the increased attention on data breaches now is the time to revisit email solutions and policies to improve the security of the information that flows throu…
