Stories from the SOC - Successful phishing attack

August 16, 2021 | Dustin Swening

Executive summary Every day, billions of emails are sent out, some legitimate, ...

Stories from the SOC - Sodinokibi Ransomware (REvil / BlueCrab)

August 10, 2021 | Ken Ng

Guest contributors to this blog: Brian Kerns and Vedran Tomljanovic.

Stories from the SOC - Office 365 account compromise and credential abuse

June 23, 2021 | Marcus Hogan

Stories from the SOC is a blog series that describes recent real-world security ...

Stories from the SOC -SSH brute force authentication attempt tactic

May 18, 2021 | Todd Luft

Stories from the SOC is a blog series that describes recent real-world security ...

Stories from the SOC – Propagating malware

March 24, 2021 | Dustin Swening

Stories from the SOC is a blog series that describes recent real-world security ...

Stories from the SOC – DNS recon + exfiltration

March 12, 2021 | Sumner Meckel

Stories from the SOC is a blog series that describes recent real-world security ...

Stories from the SOC – Beaconing Activity

March 02, 2021 | Sumner Meckel

Stories from the SOC is a blog series that describes recent real-world security ...

Stories from the SOC – Multi-layered defense detects Windows Trojan

November 16, 2020 | Joe English

Stories from the SOC is a blog series that describes recent real-world security ...

Stories from the SOC – Cloud and On-site Protection

September 28, 2020 | Edwardo Rodriguez

This blog was jointly authored by Josue Gomez

Stories from the SOC: Compromised account detected

August 04, 2020 | Edwardo Rodriguez

Stories from the SOC is a blog series that describes recent real-world security ...

Stories from the SOC - Credential Dumping

July 09, 2020 | Edwardo Rodriguez

Stories from the SOC is a blog series that describes recent real-world security ...

Stories from the SOC - detecting network anomalies with OTX

June 08, 2020 | Jeff LaCroix

This blog was co-written by Leo Garcia, Sr. Specialist - Cybersecurity..

Stories from the SOC- SSH Brute Force Authentication Attempt

June 03, 2020 | Andrew Lukosevic

Ervin McBride IV – TDP Engineer II contributed to this article.

Stories from the SOC - System compromise with lateral movement

May 26, 2020 | Josh Gomez

Executive Summary Stories from the SOC is a blog series that describes recent ...

Stories from the SOC - System compromise with lateral movement

May 26, 2020 | Josh Gomez

Executive Summary Stories from the SOC is a blog series that describes recent ...

Stories from the SOC - System compromise with lateral movement

May 26, 2020 | Josh Gomez

Executive Summary Stories from the SOC is a blog series that describes recent ...

Stories from the SOC - System compromise with lateral movement

May 26, 2020 | Josh Gomez

Executive Summary Stories from the SOC is a blog series that describes recent ...

Stories from the SOC - Office365 Credential Abuse

May 11, 2020 | Jeff LaCroix

Executive Summary Stories from the SOC is a blog series that describes recent ...

Stories from the SOC - Web Server Attack

April 27, 2020 | Leo Garcia

Executive Summary Stories from the SOC is a blog series that describes recent ...

Stories from the SOC- RIG Exploit Kit

March 30, 2020 | Andrew Lukosevic

Executive summary Stories from the SOC is a blog series that describes recent ...