Threat Hunting and HTML Response Size
Imagine that you are sitting at your workstation at work and you notice that your environment is experiencing a higher than usual HTML response size coming...
Greg Belding
Greg is a Veteran IT Professional working in the Healthcare field. He enjoys Information Security, creating Information Defensive Strategy, and writing – both as a Cybersecurity Blogger as well as for fun.
Page 31
Threat Hunting for Unusual Logon Activity
What is one of the first things that you think of when thinking of potential threat activity on your network? Most would probably say that there has been some...
Threat Hunting for Swells in Database Read Volume
When attackers have breached your network, one of the most common things they will be doing is looking into your systems that have sensitive data. This data...
Threat Hunting for Unusual DNS Requests
Searching for Unusual DNS Requests is a standard method for threat hunting. The presence of Unusual DNS Requests can often tip off Information Security professionals...
Threat Hunting for Anomalies in Privileged Account Activity
A tell-tale sign of your network being hacked is that a privileged account, such as a system administrator account, has been compromised. Attacks of this kind...
DESlock+ Encryption
Many laws and regulations require that to operate in compliance with federal and state standards, organizations have to encrypt computers that house sensitive...
Application of Open Source Scripting Tools for Automated Field Device Configuration
Automated Configuration Managers have been some of the most popular automation tools of late. They automate the configuration and updating of network...
Threat Hunting for Suspicious Registry and System File Changes
Information security professionals are normally tasked with hunting threats that have been detected on their respective networks. What happens when you think...
Threat Hunting for DDoS Activity and Geographic Irregularities
So there you are, sitting at your desk at the organization where you work as an information security professional. You are performing your usual monitoring...
Security+: Technologies and Tools – SIEM [DECOMMISSIONED ARTICLE]
Organizations today use various network security devices and tools, such as firewalls and adaptive security appliances, to collect real-time data related...