Intelligence & Analytics May 10, 2022

MITRE ATT&CK and SIEM Rules: What Should Your Expectations Be?

6 min read - The MITRE ATT&CK threat framework is seemingly everywhere these days, and with good reason. It is an invaluable tool for understanding the various methods, or as MITRE refers to them Tactics and Techniques, employed by threat actors. It offers annotated…

Intelligence & Analytics December 30, 2021

Intelligent Adversary Engagement: Deceiving the Attacker

3 min read - Traditional security isn’t always enough to keep attackers at bay. When it comes to sneaking into networks, detection will often only come after malicious traffic reaches systems such as next-generation firewalls and intrusion detection and prevention systems. Meanwhile, threat actors…

Endpoint July 1, 2021

Hunting for Windows “Features” with Frida: DLL Sideloading

8 min read - Offensive security professionals have been using Frida for analyzing iOS and Android mobile applications. However, there has been minimal usage of Frida for desktop operating systems such as Windows. Frida is described by the author as a “Dynamic instrumentation toolkit…

Intelligence & Analytics June 17, 2021

The Art and Strategy of Becoming More Cyber Resilient

4 min read - In the military, the art of strategy is key. It teaches how to win a war through a series of battles, campaigns and tactics. In the cybersecurity world, we have been on the defensive side for as long as we…

Intelligence & Analytics February 15, 2021

Unleash the Power of MITRE for a More Mature SOC

5 min read - The MITRE adversarial tactics, techniques and common knowledge (ATT&CK) framework brings pooled knowledge from across the cyber defense community, including revealing what threat actors are up to and how best you can defend against them. Let’s take a look at what…