Threat-Hunting

Threat-Hunting | Ingegneria del Rilevamento Raccolta di query di caccia alle minacce e rilevamento per: CrowdStrike Falcon usando CQL – CrowdStrike Query Language Microsoft Defender XDR usando KQL – Kusto Query Language Mirate a far emergere processi sospetti, comportamenti di rete anomali, binar...

Unified security operations with Microsoft Sentinel and Microsoft Defender XDR

Numerous cybersecurity tools exist to help organizations protect their data, people, and systems. There are different tools that check emails for phishing attempts, secure infrastructure and cloud, and provide generative AI to detect threats and uplevel response beyond human ability. While each o...

Threat actors misuse OAuth applications to automate financially driven attacks

Threat actors are misusing OAuth applications as an automation tool in financially motivated attacks. OAuth is an open standard for token-based authentication and authorization that enables applications to get access to data and resources based on permissions set by a user. Threat actors compromi...