Alexsey’s TTPs

(.. Tactics, Techniques, and Procedures)

Evaluating Threat-Blocking DNS Providers

Ask any CISO and they will tell you that one of the biggest challenges they face is…

How to Build a Secure Enclave

The steps you can take to satisfy compliance requirements.

Threat Intelligence is Dead

Long live security analytics!

At AlphaSOC we process network traffic to uncover compromised systems without relying on threat intelligence or indicators of compromise (IOCs). The rationale being that emerging threats without signatures are far more…

Uncover Detection Blindspots with Network Flight Simulator

A Deeper Look at Dangerous TLDs

Each day at AlphaSOC we process billions of network events to identify infected hosts and anomalies within customer environments. Our analytics engine scores DNS, IP, and HTTP telemetry to uncover malware implants through deep analytics, versus correlation with indicator…

DNS over HTTPS — the tip of a network visibility iceberg

Flagging Homoglyph Attacks

Red teams and state-sponsored actors are increasingly leveraging homoglyphs to phish unsuspecting users. By…

Supercharge Your SOC

Uncovering emerging threats with Network Behavior Analytics