News

Cyber warfare shows scary signs of where malware is headed
Cyber warfare shows scary signs of where malware is headed
06:34, Raleigh, North Carolina – You can probably guess what kind of blog post this is going to be if I’ve already fired up the Internet and am hunting for a
March 18, 2016
Ghostware and Two-Faced Malware Coming in 2016
Ghostware and Two-Faced Malware Coming in 2016
Summary: Malware is increasingly sophisticated. In 2016, look for two developing malware families. First, as law enforcement becomes more specialized in
Dec. 18, 2015
Operational Security Intelligence
Operational Security Intelligence
Security intelligence, threat intelligence, cyber threat intelligence, or “intel” for short is a popular topic these days in the Infosec world. It seems
Dec. 3, 2013
Using a “Playbook” Model to Organize Your Information Security Monitoring Strategy
Using a “Playbook” Model to Organize Your Information Security Monitoring Strategy
CSIRT, I have a project for you. We have a big network and we're definitely getting hacked constantly. Your group needs to develop and implement security
Nov. 1, 2013
To SIEM or Not to SIEM? Part II
To SIEM or Not to SIEM? Part II
The Great Correlate Debate SIEMs have been pitched in the past as "correlation engines" and their special algorithms can take in volumes of logs and filter everything down to just...
Oct. 24, 2013
To SIEM or Not to SIEM? Part I
To SIEM or Not to SIEM? Part I
Security information and event management systems (SIEM, or sometimes SEIM) are intended to be the glue between an organization's various security tools. Security and other event log sources export their...
Oct. 22, 2013
Big Security—Mining Mountains of Log Data to Find Bad Stuff
Big Security—Mining Mountains of Log Data to Find Bad Stuff
Your network, servers, and a horde of laptops have been hacked. You might suspect it, or you might think it's not possible, but it's happened already.
Oct. 3, 2013