SigmaHQ Essentials - Building Robust Detection Capabilities
Intro We advocate and discuss SigmaHQ repository of detections frequently on Thursday Defensive,...
SigmaHQ Essentials - Building Robust Detection Capabilities
Your Ransomware Incident Is Predictable. . .
With decades of combined experience in emergency ransomware response, the Recon IR team has...
Advanced Email Protection: Detection Techniques in Action
.png)
Hopefully you have read all about why we are excited to be offering Advanced Email Protection (AEP)...
Advanced Email Protection to be Thrilled About
If you use a computer for work, you use email, it’s a standard in every industry today. Email is...
Plan for When...
According to Forbes, there was a 72% increase in cyber breaches from 2021 to 2023. Based on the...
Digital Age: The Power of Canary Tokens and Deception Technology in Cybersecurity
In the pantheon of security systems few things are as under-rated as deception systems. NIST is...
Debunking 3 Common Myths About Ransomware Protection in Education: Insights from COSSBA Conference
Recently, I had the opportunity to attend the COSSBA (Council of School Supervisors and...
The Lockbit Ransomware Group Disruption: Now What?
By now it’s old news that the LockBit Ransomware as a Service (RaaS) company has been “disrupted”...
Emergence of Akira Ransomware Group
The Recon SOC recently worked an IR case involving the newly emerged Akira Ransomware Group. News...
Audit Active Directory Attack Paths with Bloodhound
In our experience working with SMB and enterprise IT teams, it is often unknown just how far and...