🐧🔓🌌💻🚀🌞🦎 Embrace #Linux & #unleash limitless possibilities through #exploring opensource. Master your #machine & #soar into a bright future using & contributing to #openSUSE. https://get.opensuse.org/
#linux #unleash #exploring #machine #soar #opensuse
"The higher we soar the smaller we appear to those who cannot fly." — Friedrich Nietzsche — — — #FriedrichNietzsche #quote #quotes #achievement #success #envy #jealousy #soar #belittle
#friedrichnietzsche #quote #quotes #achievement #success #envy #jealousy #soar #belittle
#EDR system with #SOAR capability and automated response across a vendor agnostic structure, shares threat info to all other clients, can quarantine any suspected client on the endpoint as well as any L2 device while opening a help desk ticket for review.
Marketing: That's XDR!
EDR client that can send a simple block IP command to a firewall
Marketing: That's ALSO XDR!
#edr #soar #infosec #cybersecurity
This week, I will not end in #meltdown. I will make sure I am getting #enoughsleep and #readingdaily. I will not let failure to plan become an emergency for me. I will #lovemypeople and let go of #pettydifferences. I will #soar.
#meltdown #enoughsleep #readingdaily #lovemypeople #pettydifferences #soar
Cisco SecureX Vs Palo Alto Networks Cortex XSOAR
#Cisco #SecureX #Paloaltonetworks #Cortex #security #Networking #SOAR
https://www.thenetworkdna.com/2023/03/cisco-securex-vs-palo-alto-networks.html
#cisco #securex #paloaltonetworks #cortex #security #networking #soar
Security experts are increasingly resorting to unauthorized #AI tools, possibly because they are unhappy with the level of automation implemented in their organization’s security operation centers (SOCs)☝️👩💻 #SOAR
https://www.helpnetsecurity.com/2023/03/17/unauthorized-ai-tools/
Sketch-a-day topic: Soar. Had some time so I did it in colored pencil, but man I need a new sharpener.
#soar #coloredpencil #bird #phoenix #sketchaday
#soar #coloredpencil #bird #phoenix #sketchaday
TheHive 5.1: Fresh features added! Check them out now https://blog.strangebee.com/thehive-v5-1-new-features/
#thehive #incidentresponse #SIRP #soar #dfir
Top challenge bringing SIEM, SOAR and UEBA together is making it easy to manage & maintain the offering. https://www.bankinfosecurity.com/forrester-security-analytics-tools-challenge-to-manage-a-21246 Forrester Analyst Allie Mellen Shares Evolution of SIEM, SOAR and UEBA, Market Gaps Anna Delaney #siem #soar #ueba #forrester #cybersecurity
#siem #soar #ueba #forrester #cybersecurity
myanmar · legs · casualties · landmine · soar
https://papercliff.github.io/redirect/?q=myanmar+legs+casualties+landmine+soar
#breakingnews #myanmar #soar
This blog will walk through different scenarios and methods to retrieve Defender for Cloud data, including exporting to Security Incident Event Management (SIEM) solutions, Log Analytics workspaces, CSV files, and alternative locations via an automated script.
#cspm #cwp #azure #cloud #multicloud #cloudsecurity #security #eventmanagement #analytics #siem #soar #defenderforcloud #loganalytics #securescore #paas #saas #microsoft #gpc #aws #sentinel #microsoftsentinel
#cspm #cwp #azure #cloud #multicloud #cloudsecurity #security #eventmanagement #analytics #siem #soar #defenderforcloud #loganalytics #securescore #paas #saas #microsoft #gpc #aws #sentinel #MicrosoftSentinel
"#KeyBanc upgrades @Splunk, cuts @datadoghq, gets 'increasingly selective' on #cloud" $SPLK $DDOG
Is this the start of a shakeout for the myriad #Observability, #AIOps, #SIEM, #SOAR, #DevOps #SRE vendors?
Based on @Sageable enquiries, it is coming.
https://seekingalpha.com/news/3932252-keybanc-upgrades-splunk-cuts-datadog
#keybanc #cloud #observability #aiops #siem #soar #devops #sre
Why is it important to understand blob-hunting?
1. Exfiltrating sensitive information from misconfigured resources is one of the top 3 cloud storage services threats
Most people think they don’t have misconfigured storage resources. Most people do.
3. There are quick and effective ways to harden your security posture and prevent these threats from happening.
Learn how Defender for Storage and Microsoft Sentinel can help you in hardening configuations, protecting storge resources and hunting for malicious activities:
#microsoft #security #cloud #storage #azureblob #azureblogstorage #s3 #aws #gcp #google #azure #defender #defenderforcloud #buckets #dns #cspm #CWPP #kql #sentinel #microsoftsentinel #siem #soar #securityposture #alerts #cybersecurity #cloudsecurity #cloudnative
#microsoft #security #cloud #storage #azureblob #azureblogstorage #s3 #aws #gcp #google #azure #defender #defenderforcloud #buckets #dns #cspm #cwpp #KQL #sentinel #MicrosoftSentinel #siem #soar #securityposture #alerts #cybersecurity #cloudsecurity #cloudnative
In this blog post, we'll explain how you can set up automatic response actions for any built-in alerts in Microsoft 365 Defender:
#xdr #microsoft #microsoft365defender #azure #edr #casb #defender #ExtendedDetectionandResponse #soc #kql #siem #soar #azure #cloud #cloudsecurity #automation #cybersecurity
#xdr #microsoft #microsoft365defender #azure #edr #casb #defender #extendeddetectionandresponse #soc #KQL #siem #soar #cloud #cloudsecurity #automation #cybersecurity
Hunting - Office 365 Unified Audit Log
"This is a key data source in any cloud investigation because it contains a record of all the activity that has occurred in Office 365 and Azure Active Directory."
"If we use this resource correctly, it can help us build a full story of a threat actor’s activity in Office 365."
https://techcommunity.microsoft.com/t5/microsoft-security-experts-blog/good-ual-hunting/ba-p/3718421
#hunting #advancedhunting #office365 #microsoft365 #sentinel #microsoftsentinel #casb #xdr #Azure #microsoft #microsoftsecurity #audit #ual #AzureActiveDirectory #Exchange #OneDrive #DefenderforCloudApps #siem #soar #cloud #cloudsecrity #data #kql
#hunting #advancedhunting #office365 #microsoft365 #sentinel #MicrosoftSentinel #casb #xdr #azure #microsoft #microsoftsecurity #audit #UAL #azureactivedirectory #exchange #onedrive #defenderforcloudapps #siem #soar #cloud #cloudsecrity #data #KQL
Validating Complex Agent Behavior
(2003) : Wallace, Scott A.
url: http://hdl.handle.net/2027.42/123738
#complex_agents #methodology #agents #behaviour_bounding #validation #SOAR #my_bibtex
#complex_agents #methodology #agents #behaviour_bounding #validation #soar #my_bibtex
Send your #SIEM alerts through #SOAR automation and other buzzword things - deep dive post from our team on how we automate sections of the alert triage, investigation, and response phases in our detection pipeline:
https://medium.com/brexeng/elevating-security-alert-management-using-automation-828004ad596c
Hit us up if you have questions! Pairing high quality data pipelines with tiered signal/alert detection, and automated response assistance can help your small team get a lot done to disrupt attackers 🥳