An Encounter with Ransomeware-as-a-Service: MEGAsync Analysis
Recon's SOC recently responded to an attempted ransomware and extortion attack. It had all the...
An Encounter with Ransomeware-as-a-Service: MEGAsync Analysis
An Encounter With TA551/Shathak
The Recon incident response team recently responded to a case of business email compromise. The...
Threat Hunting - A Critical Component of High Performing SOCs
Whether your cybersecurity detection and response capabilities are in-house or managed through a...
SOC X 2021 - A Recap
We can't start a recap post without a huge THANK YOU to the community for joining us last week and...
Detecting Threats with Graylog Pipelines - Part 3
Now that we've normalized and enriched our events, let's get into the actual threat detection logic...
Detecting Threats with Graylog Pipelines - Part 2
In my previous post, I explained the fundamental purpose and use cases of pipelines in Graylog –...
Detecting Threats with Graylog Pipelines - Part 1
If you are here hoping to learn more about using Graylog for the purpose of monitoring the security...
The Training Secrets of Great Security Operations Teams
At Recon InfoSec we have the honor of working with some of the best security operations, incident...
A SecDevOps Perspective on SUNBURST
Much has already been said about the recently reported SolarWinds compromise. In this post, we are...
Endpoint Logging For The Win!
Whether you're on the Defensive or Offensive side of security, it's important to understand how...