Another day of Cybersecurity
What are the effective ways to identify an adversary in Active Directory infrastructure? There are many ways to identify Active Directory incidents, whether through Event IDs, network traffic, or other logs. The logs are often missing or don’t have accurate … Read the rest
Microsoft Defender for Identity Group recently released the Active Directory Certificate Service (ADCS) support and expanded its coverage with a new AD CS sensor!. Great milestone.
Like other sensor types in Microsoft Defender for Identity, this one is simple … Read the rest
Generative AI and it’s Cybersecurity presents both opportunities and risks. You can’t read the news at the moment without seeing a story about AI, particularly Generative AI (GenAI), which generates text, images, and other stuff. The pace at which people … Read the rest
Ransomware attacks grow and cripple companies, cities, and businesses. Attackers are locking people out of their networks and demanding significant payment to get back in. The case is that many organizations still pay attackers in order to get their data … Read the rest
One of the key features of Microsoft Sentinel is the ability to ingest data from different sources, such as Azure services, Microsoft 365, third-party solutions, and custom connectors. Logs and Tables can store, query, and visualize this data in the … Read the rest
Many times people asked me about the differences between external attack surface management, vulnerability management, and penetration testing. Mostly “What will be the and the right approach to handling security tools alongside the behavior and procedures. While many organization has … Read the rest
Threat Hunting in the Cloud differs from Legacy Threat Hunting (on-premise). Change my Mind.
This post, among many others in the “Cloud Threat Hunting” series, will take you into the Cloud Threat-Hutning and “little things” you should know. I have … Read the rest
In today’s AI landscape, software security is of paramount importance. With the increasing complexity of applications and the constant evolution of cyber threats, developers and security professionals must remain vigilant to protect sensitive data and prevent malicious attacks. As technology … Read the rest
