Incident Response

1.1K

Stories

663

Writers

Richard de Vries

Tales from a Security Professional

·19 hours ago

Is it worth it to organize tabletop exercises that are focused on security?

Dealing with security incidents is not something that only the security department should be focused on. It is a combined effort of multiple teams and departments. But the issue is that not every team/department is constantly involved in a security incident. Each category of security incidents most likely has its own run/playbook and therefore most likely different teams are involved. But how can you ensure everybody recalls what to do when a major security incident occurs? Running a periodic tabletop exercise is one way of resolving this.

Tabletop

4 min read

MalwareMayCry

·2 days ago

Malware Analysis Report 05/13/2022

Malware Type: Backdoor Trojan — IOCs(Indicators of Compromise): vasumov.dat, vasumov.exe, avvenne.ini, destinata.ini, ora.exe.com, qual.ini, IP Address: 195.58.48.252, C2s: suqklp53.top, xxxp://moraub06.top/index.php, xxxp://cazars09.top/downfiles/lv.exe File Information and Hashes: Stage 1: Triage A user attempted to torrent Microsoft Word. Crowdstrike Falcon detected the activity from the setup file that they downloaded. Instead of installing Microsoft Word it runs the following command from cmd.exe:

Malware Analysis

7 min read

Mohammad Larosh Khan

·2 days ago

Detection and hunting of Web shells

Hello Folks, In this article, we will be looking at detecting and hunting two types of webshells. Webshells abusing w3wp to execute malicious commands via cmd or powershell Webshells implanted by attackers of wordpress based websites. Lets Start! Before looking at the first type of webshells, lets understand what w3wp…

Incident Response

7 min read

InfoOnSecurity

·2 days ago

Security Bytes: May 9–13,22

A quick review of Security Incidents this week.

Cybersecurity

1 min read

evilmango

·4 days ago

Hive Ransomware Attack (Forensics, Incident Response, and Penetration Testing)

Hi, hope you are well. I’m Muhammad Talha Arshad, a security researcher from Pakistan. This was my first project related to incident response and forensics along with Hamza Rabbani. So, a million-dollar organization was hit by the “hive” ransomware group. They pwned everything in their network and live there for…

Ransomware

6 min read

Salusive Health Data Breach

SOURCE: HALOCK Breach Bulletin An overview of the breach: Description, Indicators of Compromise (IoC), Containment, Prevention DESCRIPTION Salusive Health, a California based healthcare firm, announced in early May that it had been the victim of a data breach. The digital healthcare startup, also known as myNurse, specializes in providing care…

Data Breach

3 min read

SOCFortress

·5 days ago

FREE Incident Response With Velociraptor

Remotely investigate your endpoints with Velociraptor Intro Velociraptor is a unique, advanced open-source endpoint monitoring, digital forensic and cyber response platform. It was developed by Digital Forensic and Incident Response (DFIR) professionals who needed a powerful and efficient way to hunt for specific artifacts and monitor activities across fleets of…

Infosec

6 min read

FREE Incident Response With Velociraptor

Cetas Cyber

·5 days ago

Transform your security operations with Cetas Autonomous Incident Responder, the futuristic security intelligence and automation platform

Introduction Hacker sophistication continues to outpace traditional defense technology such as SIEM, DLP, UEBA, and SOAR. The fallout of such breaches will continue to increase in magnitude due to widespread migration to multi-cloud platforms, server-less deployments and the large-scale adoption of SaaS applications. Complex scenarios require sophisticated automation, especially with…

Security

6 min read

incident.io

CodeX

·6 days ago

Incident postmortem pitfalls

We spent some time talking to Gergely Orosz about our thoughts on what happens when an incident is over, and you’re looking back on how things went. If you haven’t read it already, grab a coffee, get comfortable, and read Gergely’s full article Postmortem Best Practices. But before you do…

Incident Response

4 min read

Richard de Vries

Tales from a Security Professional

·May 8

So you identified a security incident; now what?

People will frequently think when they hear the word security incident, about incident response. And that is accurate. And while many incident response plans undoubtedly provide guidance on what to do when why and sometimes also how, they often overlook a really critical element. Where and how to store the data, you are collecting during a security incident? Yes, I am talking about security incident case management.

Incident Response

4 min read

So you identified a security incident; now what?

Incident Response

Is it worth it to organize tabletop exercises that are focused on security?

Malware Analysis Report 05/13/2022

Detection and hunting of Web shells

Security Bytes: May 9–13,22

Hive Ransomware Attack (Forensics, Incident Response, and Penetration Testing)

Salusive Health Data Breach

FREE Incident Response With Velociraptor

Transform your security operations with Cetas Autonomous Incident Responder, the futuristic security intelligence and automation platform

Incident postmortem pitfalls

So you identified a security incident; now what?

1.1K

663

Related Topics

Top Writers

Mike Cohen

Alican Kiraz

Michael Koczwara

Nisarg Suthar

CyberJunnkie