EDR检测持久化Persistence入门
随着ATT&CK被广泛认可，识别入侵行为TTPs而不是特征码，已成为新安全产品标配：行为是新控制，是应对高级威胁的关键安全控制，是xDR产品的基础能力。在主机和端点上识别持久化手段的效果明显且较容易入手，是甲方同学应优先考虑获取的能力。
Aggregator
glibc system call wrapper
5 years 10 months ago
Terenceli
You're Opted in by Default - Know When and Where to Opt Out
5 years 10 months ago
F5 Labs' Preston Hogue writes for Security Week, explaining how to manage the personal data you have spread across the internet in an assume breach world.
《故事》学习笔记 | Charpter17 人物
5 years 10 months ago
【声明：《故事》摘要 系列为阅读 *罗伯特∙麦基 《故事
Cyber resilience - nothing to sneeze at
5 years 10 months ago
David K introduces the concept of cyber resilience, and the benefits it brings.
Protecting system administration with PAM
5 years 10 months ago
Remote system administration provides powerful and flexible access to systems and services.
How to Detect Pass-the-Hash Attacks Blog Series
5 years 10 months ago
Jeff Warren really knows AD security and the Windows Security Log. He brings me a lot of good ideas and tips for enhancing my Security Log Encyclopedia. He also really stays up-to-date on the latest cyber attack techniques and thinks about how to detect them with the Security Log, Sysmon and other logs in the AD/Windows environment. Check out his latest blog post on detecting pass-the-hash with Windows event logs here: https://blog.stealthbits.com/how-to-detect-pass-the-hash-attacks/
This is the first in a three part series so stay tuned for the rest.
From the Dojo to the SOC
5 years 10 months ago
Key lessons from martial arts translate to cyber-defense, including preparation, taking falls, proper stance, diligent practice, sparring, and continuous growth.
Preparing for denial of service (DoS) attacks
5 years 10 months ago
It is not possible to fully mitigate the risk of a denial of service attack affecting your service, but there are some practical steps that will help you be prepared to respond, in the event your service is subjected to an attack.
vsyscall and vDSO
5 years 10 months ago
Terenceli
Developing the cyber security profession – have your say!
5 years 10 months ago
Chris Ensor discusses the government's proposal to develop the cyber security profession in the UK.
Managing the risk of cloud-enabled products
5 years 10 months ago
Guidance outlining the risks of locally installed products interacting with cloud services, and suggestions to help organisations manage this risk.
GDPR security outcomes
5 years 10 months ago
This guidance describes a set of technical security outcomes that are considered to represent appropriate measures under the GDPR.
February 2019 Security Update Release
5 years 10 months ago
Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates.
More information about this month’s security updates can be found on the Security Update Guide.
February 2019 Security Update Release
5 years 10 months ago
Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates.
More information about this month’s security updates can be found on the Security Update Guide.
Revisiting How Registrants Can Reduce the Threat of Domain Hijacking
5 years 10 months ago
Recent events1,2 have shown the threat of domain hijacking is very real; however, it is also largely preventable. As Verisign previously noted3, there are many security controls that registrants can utilize to help strengthen their security posture. Verisign would like to reiterate this advice within the context of the recent domain hijacking reports. Domains are […]
The post Revisiting How Registrants Can Reduce the Threat of Domain Hijacking appeared first on Verisign Blog.
Matt Thomas
The Business of Organised Cybercrime
5 years 10 months ago
F5 Labs' David Warburton writes for Professional Security, discussing how your stereotypical perception of cybercrime is all wrong - and what to do about it.
Protecting your Domain Names: Taking the First Steps
5 years 10 months ago
Everyone and everything on the Internet depends on the Domain Name System (DNS) being functional. The DNS has been a common vector for attacks in recent years, and 2019 seems to be no different. Many of these attacks have goals far more sinister than simply taking a company offline or defacing a website; reported attacks include redirecting some or all of an organization's domain to gain access to protected resources, intercept traffic, and even obtain TLS certificates for that domain. Organizations should perform regular DNS reviews and audits. The following guidelines provide a starting point for your review.
Akamai
If I Had to Do It Over Again, Part 2
5 years 10 months ago
More lessons learned from CISOs about “fire and forget,” physical security, the human factor, and audit logging.
Phishing Attacks Against Facebook / Google via Google Translate
5 years 10 months ago
When it comes to phishing, criminals put a lot of effort into making their attacks look legitimate, while putting pressure on their victims to take action. In today's post, we're going to examine a recent phishing attempt against me personally....
Larry Cashdollar