EDR检测持久化Persistence入门
随着ATT&CK被广泛认可，识别入侵行为TTPs而不是特征码，已成为新安全产品标配：行为是新控制，是应对高级威胁的关键安全控制，是xDR产品的基础能力。在主机和端点上识别持久化手段的效果明显且较容易入手，是甲方同学应优先考虑获取的能力。
Aggregator
Please support the site operations by clicking ads.
EDR检测持久化Persistence入门
7 years 8 months ago
随着ATT&CK被广泛认可，识别入侵行为TTPs而不是特征码，已成为新安全产品标配：行为是新控制，是应对高级威胁的关键安全控制，是xDR产品的基础能力。在主机和端点上识别持久化手段的效果明显且较容易入手，是甲方同学应优先考虑获取的能力。
EDR检测持久化Persistence入门
7 years 8 months ago
随着ATT&CK被广泛认可，识别入侵行为TTPs而不是特征码，已成为新安全产品标配：行为是新控制，是应对高级威胁的关键安全控制，是xDR产品的基础能力。在主机和端点上识别持久化手段的效果明显且较容易入手，是甲方同学应优先考虑获取的能力。
EDR检测持久化Persistence入门
7 years 8 months ago
随着ATT&CK被广泛认可，识别入侵行为TTPs而不是特征码，已成为新安全产品标配：行为是新控制，是应对高级威胁的关键安全控制，是xDR产品的基础能力。在主机和端点上识别持久化手段的效果明显且较容易入手，是甲方同学应优先考虑获取的能力。
glibc system call wrapper
7 years 8 months ago
Terenceli
You're Opted in by Default - Know When and Where to Opt Out
7 years 8 months ago
F5 Labs' Preston Hogue writes for Security Week, explaining how to manage the personal data you have spread across the internet in an assume breach world.
Serva 3.0.0 HTTP Server整数溢出远程拒绝服务漏洞
7 years 8 months ago
作者：k0shl 转载请注明出处：https://whereisk0shl.top
《故事》学习笔记 | Charpter17 人物
7 years 8 months ago
【声明：《故事》摘要 系列为阅读 *罗伯特∙麦基 《故事
《故事》学习笔记 | Charpter17 人物
7 years 8 months ago
【声明：《故事》摘要 系列为阅读 *罗伯特∙麦基 《故事
Cyber resilience - nothing to sneeze at
7 years 8 months ago
David K introduces the concept of cyber resilience, and the benefits it brings.
Better language models and their implications
7 years 8 months ago
We’ve trained a large-scale unsupervised language model which generates coherent paragraphs of text, achieves state-of-the-art performance on many language modeling benchmarks, and performs rudimentary reading comprehension, machine translation, question answering, and summarization—all without task-specific training.
How to Detect Pass-the-Hash Attacks Blog Series
7 years 8 months ago
Jeff Warren really knows AD security and the Windows Security Log. He brings me a lot of good ideas and tips for enhancing my Security Log Encyclopedia. He also really stays up-to-date on the latest cyber attack techniques and thinks about how to detect them with the Security Log, Sysmon and other logs in the AD/Windows environment. Check out his latest blog post on detecting pass-the-hash with Windows event logs here: https://blog.stealthbits.com/how-to-detect-pass-the-hash-attacks/
This is the first in a three part series so stay tuned for the rest.
From the Dojo to the SOC
7 years 8 months ago
Key lessons from martial arts translate to cyber-defense, including preparation, taking falls, proper stance, diligent practice, sparring, and continuous growth.
From the Dojo to the SOC
7 years 8 months ago
Key lessons from martial arts translate to cyber-defense, including preparation, taking falls, proper stance, diligent practice, sparring, and continuous growth.
From the Dojo to the SOC
7 years 8 months ago
Key lessons from martial arts translate to cyber-defense, including preparation, taking falls, proper stance, diligent practice, sparring, and continuous growth.
Preparing for denial of service (DoS) attacks
7 years 8 months ago
It is not possible to fully mitigate the risk of a denial of service attack affecting your service, but there are some practical steps that will help you be prepared to respond, in the event your service is subjected to an attack.
vsyscall and vDSO
7 years 8 months ago
Terenceli
Developing the cyber security profession – have your say!
7 years 8 months ago
Chris Ensor discusses the government's proposal to develop the cyber security profession in the UK.
February 2019 Security Update Release
7 years 8 months ago
Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates.
More information about this month’s security updates can be found on the Security Update Guide.
February 2019 Security Update Release
7 years 8 months ago
Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates.
More information about this month’s security updates can be found on the Security Update Guide.