openSUSE Linux · @opensuse
6607 followers · 1664 posts · Server fosstodon.org

🐧🔓🌌💻🚀🌞🦎 Embrace & limitless possibilities through opensource. Master your & into a bright future using & contributing to . get.opensuse.org/

#linux #unleash #exploring #machine #soar #opensuse

Last updated 1 year ago

JBRoss · @jbross
19 followers · 490 posts · Server mstdn.party

"The higher we soar the smaller we appear to those who cannot fly." — Friedrich Nietzsche — — —

#friedrichnietzsche #quote #quotes #achievement #success #envy #jealousy #soar #belittle

Last updated 1 year ago

Dante Mercurio · @dantemercurio
150 followers · 823 posts · Server ioc.exchange

system with capability and automated response across a vendor agnostic structure, shares threat info to all other clients, can quarantine any suspected client on the endpoint as well as any L2 device while opening a help desk ticket for review.

Marketing: That's XDR!

EDR client that can send a simple block IP command to a firewall

Marketing: That's ALSO XDR!

#edr #soar #infosec #cybersecurity

Last updated 2 years ago

This week, I will not end in . I will make sure I am getting and . I will not let failure to plan become an emergency for me. I will and let go of . I will .

#meltdown #enoughsleep #readingdaily #lovemypeople #pettydifferences #soar

Last updated 2 years ago

The Network DNA · @thenetworkdna
4 followers · 93 posts · Server mastodon.world
Manuel Bissey · @mbissey
5 followers · 154 posts · Server cyberplace.social

Security experts are increasingly resorting to unauthorized tools, possibly because they are unhappy with the level of automation implemented in their organization’s security operation centers (SOCs)☝️👩‍💻

helpnetsecurity.com/2023/03/17

#ai #soar

Last updated 2 years ago

BrBstudios · @BrBstudios
32 followers · 491 posts · Server socel.net

Sketch-a-day topic: Soar. Had some time so I did it in colored pencil, but man I need a new sharpener.

#soar #coloredpencil #bird #phoenix #sketchaday

Last updated 2 years ago

StrangeBee · @Strangebee
35 followers · 3 posts · Server infosec.exchange
Cate · @lavndrblue
970 followers · 4786 posts · Server mas.to
Tony Morbin · @tonymorbin
24 followers · 296 posts · Server infosec.exchange

Top challenge bringing SIEM, SOAR and UEBA together is making it easy to manage & maintain the offering. bankinfosecurity.com/forrester Forrester Analyst Allie Mellen Shares Evolution of SIEM, SOAR and UEBA, Market Gaps Anna Delaney

#siem #soar #ueba #forrester #cybersecurity

Last updated 2 years ago

papercliff · @papercliff
2781 followers · 621 posts · Server newsie.social
F0rm4t · @F0rm4t
35 followers · 37 posts · Server infosec.exchange
AndiMann · @AndiMann
320 followers · 651 posts · Server masto.ai

" upgrades @Splunk, cuts @datadoghq, gets 'increasingly selective' on " $SPLK $DDOG

Is this the start of a shakeout for the myriad , , , , vendors?

Based on @Sageable enquiries, it is coming.

seekingalpha.com/news/3932252-

#keybanc #cloud #observability #aiops #siem #soar #devops #sre

Last updated 2 years ago

F0rm4t · @F0rm4t
34 followers · 35 posts · Server infosec.exchange

Why is it important to understand blob-hunting?

1. Exfiltrating sensitive information from misconfigured resources is one of the top 3 cloud storage services threats

Most people think they don’t have misconfigured storage resources. Most people do.

3. There are quick and effective ways to harden your security posture and prevent these threats from happening.

Learn how Defender for Storage and Microsoft Sentinel can help you in hardening configuations, protecting storge resources and hunting for malicious activities:

techcommunity.microsoft.com/t5

#microsoft #security #cloud #storage #azureblob #azureblogstorage #s3 #aws #gcp #google #azure #defender #defenderforcloud #buckets #dns #cspm #cwpp #KQL #sentinel #MicrosoftSentinel #siem #soar #securityposture #alerts #cybersecurity #cloudsecurity #cloudnative

Last updated 2 years ago

Jeff the Alien · @hackdefendr
322 followers · 3039 posts · Server defenders.town

OK break time is over.

Back to pythoning the crap out of stuff in my

#soar

Last updated 2 years ago

F0rm4t · @F0rm4t
32 followers · 34 posts · Server infosec.exchange
Jeff the Alien · @hackdefendr
322 followers · 3017 posts · Server defenders.town

My platform kept rejecting my and configurations simultaneously today.

Multiple requested fields do not get populated until later in the execution. I may have to the crap out of it tomorrow.

That is all.

#soar #code #python #infosec #blueteam

Last updated 2 years ago

F0rm4t · @F0rm4t
31 followers · 33 posts · Server infosec.exchange

Hunting - Office 365 Unified Audit Log

"This is a key data source in any cloud investigation because it contains a record of all the activity that has occurred in Office 365 and Azure Active Directory."

"If we use this resource correctly, it can help us build a full story of a threat actor’s activity in Office 365."

techcommunity.microsoft.com/t5

#hunting #advancedhunting #office365 #microsoft365 #sentinel #MicrosoftSentinel #casb #xdr #azure #microsoft #microsoftsecurity #audit #UAL #azureactivedirectory #exchange #onedrive #defenderforcloudapps #siem #soar #cloud #cloudsecrity #data #KQL

Last updated 2 years ago

nope · @stacked_automation
124 followers · 6890 posts · Server mastodon.social

Send your alerts through automation and other buzzword things - deep dive post from our team on how we automate sections of the alert triage, investigation, and response phases in our detection pipeline:

medium.com/brexeng/elevating-s

Hit us up if you have questions! Pairing high quality data pipelines with tiered signal/alert detection, and automated response assistance can help your small team get a lot done to disrupt attackers 🥳

#siem #soar

Last updated 2 years ago