Open in app
Sign inGet started
Keep up to date with our latest features

Keep up to date with our latest features

We’re launching a newsletter for our customers and the general public to keep up to speed with the developments and improvements happening…
Go to the profile of David Vassallo
David Vassallo
Latest Stories

Detecting CVE-2022–30190 “Follina”

CyberSift has just pushed an update to it’s Windows Context Workers in order to detect attempts to exploit the CVE-2022–30190 “Follina”…
Go to the profile of David Vassallo
David Vassallo

Detecting Lateral Movement in Windows Environments

One of the anomaly detection algorithms deployed in CyberSift is the ability to detect abnormal login patterns which could indicate lateral…
Go to the profile of David Vassallo
David Vassallo
Windows High Privilege User Monitoring

Windows High Privilege User Monitoring

High Privilege Users (HPUs) are users in your Windows environment which have “blanket authority” over your infrastructure. Typically these…
Go to the profile of David Vassallo
David Vassallo
The CyberSift Packet Capture Parser — SYN Requests Anomalies

The CyberSift Packet Capture Parser — SYN Requests Anomalies

This article is part of a series on the CyberSift Packet Capture Parser. In this article we’ll give an overview of one of our anomaly…
Go to the profile of David Vassallo
David Vassallo
The CyberSift Packet Capture Parser — TCP Stream and ASN Bytes Anomalies

The CyberSift Packet Capture Parser — TCP Stream and ASN Bytes Anomalies

This article is part of a series on the CyberSift Packet Capture Parser. In this article we’ll give an overview of two anomaly detection…
Go to the profile of David Vassallo
David Vassallo
The CyberSift Packet Capture Parser — DNS Queries

The CyberSift Packet Capture Parser — DNS Queries

This article is part of a series on the CyberSift Packet Capture Parser. In this article we’ll discuss the simple yet useful “DNS Queries”…
Go to the profile of David Vassallo
David Vassallo
The CyberSift Packet Capture Parser — Bandwidth Usage

The CyberSift Packet Capture Parser — Bandwidth Usage

This article is part of a series on the CyberSift Packet Capture Parser. In this article, we’ll discuss two modules: “Bandwidth Per IP” and…
Go to the profile of David Vassallo
David Vassallo
The CyberSift Packet Capture Parser — Threat Intelligence

The CyberSift Packet Capture Parser — Threat Intelligence

This article is part of a series on the CyberSift Packet Capture Parser
Go to the profile of David Vassallo
David Vassallo

The CyberSift Packet Capture Parser — Intro

One of the most frequent questions we get is how to extract information from a Wireshark packet capture, such as the bandwidth used:
Go to the profile of David Vassallo
David Vassallo
About CyberSiftLatest StoriesArchiveAbout MediumTermsPrivacyTeams