iMonitor

중국어 소개 iMonitor 엔드포인트 행동 분석 시스템은 iMonitorSDK 기반의 엔드포인트 행동 모니터링 및 분석 소프트웨어입니다. 프로세스, 파일, 레지스트리, 네트워크 등 시스템 행동 모니터링을 제공합니다. 확장 및 스크립트를 지원하여 쉽게 기능을 커스터마이징하고 추가할 수 있습니다. 바이러스 분석, 소프트웨어 리버스 엔지니어링, 침입 탐지, EDR 등에 사용할 수 있습니다. 스크린샷 버전 2.2.0（2022.10.30） 스크립트 지원 추가 스크립트를 사용하여 열 확장, 사용자 정의 매처 커스터마이징 가능 자세한 참...

AntiVE-BehaviorWatch

AntiVE-BehaviorWatch 사이버 보안 연구를 위한 임베디드 AI 기반 인간 행동 검증. AntiVE-BehaviorWatch란 무엇인가요? AntiVE-BehaviorWatch 는 임베디드 인공 지능 을 사용하여 실행 제어에 대한 새로운 접근 방식을 탐구하는 Windows 기반 사이버 보안 연구 프로젝트입니다. 가상 머신 탐지, 샌드박스 탐지, 디버거 검사, 하드웨어 지문 인식과 같은 기존의 분석 방지 기술에 의존하는 대신, 이 프로젝트는 내장된 GRU게이트 순환 유닛 신경망 을 사용하여 실제 인간 이 시스템과 상...

tirreno

tirreno tirreno はオープンなセキュリティ分析ツールです。 tirreno tir.ˈrɛ.no は、サイバー脅威、アカウント乗っ取り、ボット、不正利用からアプリケーションを理解・監視・保護するのに役立ちます。従来のサイバーセキュリティがインフラストラクチャとネットワーク境界に焦点を当てているのに対し、ほとんどの侵害は、ファイアウォール、SIEM、WAF、その他の防御を迂回する、侵害されたアカウントやアプリケーションロジックの悪用を通じて発生します。 tirreno...

AI-Powered Surveillance in Schools

It all sounds pretty dystopian: Inside a white stucco building in Southern California, video cameras compare faces of passersby against a facial recognition database. Behavioral analysis AI reviews the footage for signs of violent behavior. Behind a bathroom door, a smoke detector-shaped device...

Webinar: Learn How AI-Powered Zero Trust Detects Attacks with No Files or Indicators

Security teams are still catching malware. The problem is what they're not catching. More attacks today don't arrive as files. They don't drop binaries. They don't trigger classic alerts. Instead, they run quietly through tools that already exist inside the environment — scripts, remote access,...

EUVD-2025-35111

Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...

Recorded Future Triage 安全漏洞

Recorded Future Triage is a cloud sandboxing service from US-based Recorded Future. A security vulnerability exists in Recorded Future Triage that stems from a Windows behavioral analysis engine that allows malicious samples to evade detection by recursively spawning a large number of child...

User Behavior Analysis in Privacy Protection with Large Language Models: a Study on Privacy Preferences with Limited Data

With the widespread application of large language models LLMs, user privacy protection has become a significant research topic. Existing privacy preference modeling methods often rely on large-scale user data, making effective privacy preference analysis challenging in data-limited environments...

Irish Watchdog Imposes Record €310 Million Fine on LinkedIn for GDPR Violations

The Irish data protection watchdog on Thursday fined LinkedIn €310 million $335 million for violating the privacy of its users by conducting behavioral analyses of personal data for targeted advertising. "The inquiry examined LinkedIn's processing of personal data for the purposes of behavioral...

How to Detect Suspicious API Traffic

...

How to Detect New Threats via Suspicious Activities

Unknown malware presents a significant cybersecurity threat and can cause serious damage to organizations and individuals alike. When left undetected, malicious code can gain access to confidential information, corrupt data, and allow attackers to gain control of systems. Find out how to avoid...

BlackMatter Ransomware Analysis; The Dark Side Returns

ARCHIVED STORY BlackMatter Ransomware Analysis; The Dark Side Returns By Alexandre Mundo and Marc Elias · September 22, 2021 BlackMatter is a new ransomware threat discovered at the end of July 2021. This malware started with a strong group of attacks and some advertising from its developers that...

How profiling employee working hours helps to detect security incidents

At the TimeMachine company there are two special old friends Bob and Alice. Bob, as a team manager, usually has a very busy schedule filled with meetings all day long. You can even find him working late into the night trying to catch up on email he received during the day. Alice on the other hand...

Visualize and Analyze Bots with Real User Monitoring

You interact with more than just customers on your website. Bots make up a disproportionate amount of traffic, which can skew human behavior analysis data -- and cause you to make the wrong business decisions...

MDR Vendor Must-Haves, Part 5: Multiple Threat Detection Methodologies, Including Deep Attacker Behavior Analysis

This blog post is part of an ongoing series about evaluating Managed Detection and Response MDR service providers. For more insights, check out our guide, “10 Things Your MDR Service Must Do.” Let’s start with an analogy: Say you’re a fisherman out on a mission to specifically catch tuna. You thr...

Rapid7 Releases Q2 2020 Quarterly Threat Report

It’s hard to believe it’s already the end of September, and with it comes Rapid7’s Q2 2020 Quarterly Threat Report. As in previous quarters, our Rapid7 research team produced this report by analyzing the data from our internet telemetry-gathering systems Project Sonar and Project Heisenberg, as...

Threat Roundup for October 4 to October 11

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Oct. 4 and Oct. 11. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics,...

Biometrics: Security Solution or Issue?

NYC – With more transactions occurring online – and subsequently, the number of data breaches increasing – biometrics are moving to the forefront in discussions as a top way to authenticate data securely. However, challenges remain. The method is not yet being widely utilized by consumers or...

LockCrypt ransomware: weakness in code can lead to recovery

At the start of the year, it seemed that 2018 was going to be all about cryptominers. They so overwhelmingly dominated the landscape that it looked like no other threat had a chance. However, ransomware is not giving up the field so fast. There have been new variants popping up every couple of...

Suppressing the Adversary via Threat Hunt Teams

What a brave new world. Global cyber insurgencies continue unabated. Decreasing dwell time is imperative in 2018. In order to achieve this goal, we must embrace the hunt. Every organization should stand up a threat hunt team. The team must be multidisciplinary with experience in e-forensics and...