Spring cleaning your browser | Red Canary
There’s something so satisfying about a good spring cleaning: the kind where you open the windows, clear the clutter, and finally deal with the things…
Category: ThreatIntelligence-IncidentResponse
dmXProtect: Stop, Drop, Shut Malware Down
Note from the author: I’d be remiss not to mention the strangeness of the blog title, a simple but albeit ludicrous spin-off of a DMX…
Before the Breach: Why Test Environments Are a Major Cloud Risk
Key Takeaways Most security failures do not begin where they are discovered. By the time risk becomes visible in production, the decisions that created it…
BEC Threat Hunting: How to Detect Microsoft 365 Compromises
We all have thoughts that keep us up at night. Will the ticking noise the car made end up being an expensive repair? When will…
Thwarting Financial Fraud | Huntress
Huntress has been hunting malicious actors across 60,000+ user accounts for almost 2,000 small businesses enrolled in our Managed Detection and Response (MDR) for Microsoft…
Celebrating One Year of Security Awareness Training
Today marks one year since Huntress announced the acquisition of Curricula, which is now Huntress Security Awareness Training. This acquisition was especially exciting for all…
Business Email Compromise via Azure Administrative Privileges
Most of the time when you hear about business email compromise (BEC), you hear a single user account was compromised, leading to large amounts of…
ES|QL detection rules, generated from plain English by Elastic Security’s AI Agent — Elastic Security Labs
Elastic Security now includes AI-powered detection rule creation, built into the rule creation workflow. Analysts describe a threat behavior in plain English and receive a…
Entity Analytics Watchlists in Elastic Security: organizational risk context as a scoring signal — Elastic Security Labs
Elastic Security v9.4 introduces Entity Analytics Watchlists, a new capability in the Entity Analytics suite that lets security teams create named, weighted lists of users,…
Proactive threat hunting with Elastic’s AI-generated hunting leads — Elastic Security Labs
Threat hunting has always been a human art; a practitioner staring at logs, forming a hypothesis, and patiently chasing it down. What if the hardest…
UEBA & entity analytics: Why entity record quality matters — Elastic Security Labs
There’s an uncomfortable truth in security analytics that nobody talks about at conferences: The quality of your detections, alerts, and investigations is only as good…
Why Huntress Trusts Microsoft Defender Antivirus
Choosing the right antivirus (AV) tool can be a real headache. With so many options available, how do you know which one is the right…