Read insights, thought leadership, and platform updates.

Explore all posts

Topics

Showing 7 posts about Incident Response

Elevate Your Threat Detection and Response with ThreatConnect and Dataminr

Cybersecurity teams are under constant pressure to maintain real-time visibility into potential threats across various categories, including digital risks, third-party risks, vulnerabilities, and cyber-physical threats. The challenge lies in trying to monitor all these categories in real time for emerging and active threats. Monitoring, analyzing, and responding to cyber threats is resource-intensive and complex without […]

Posted Jul 29th, 2024

Incident Response

Preparing Organizations To Stop Ransomware in 2023

The new year is almost upon us, and 2022 has been a game of ransomware hardball. However, lessons learned this year can help organizations take proactive steps to protect themselves from ransomware in 2023. If you followed Cybersecurity and Infrastructure Security Agency (CISA) alerts on ransomware for the year, you would have noted malicious activity […]

Posted Dec 27th, 2022

Incident Response

Healthcare Email Threats are Growing – Combat Them with Phishing Analysis & Response

In recent years, healthcare providers are increasingly being targeted with coordinated, sophisticated Phishing and Business Email Compromise (BEC) campaigns. As these attacks continue to grow, security teams need tools to help save time and address the threats more effectively. In one recent example, the Health and Human Services Health Sector Cybersecurity Coordination Center (HHS HC3) […]

Posted Dec 9th, 2022

Incident Response

SOAR: An Incident Responder’s Best Friend

Decrease Time to Response and Remediation with SOAR As an Incident Responder (IR), it doesn’t seem to matter how quickly you solve an issue nor if the case or ticket comes to you with no additional information. You are constantly told to “move faster.” You’re flooded with tickets, incidents and cases – but often times […]

Posted Aug 26th, 2020

Incident Response

ThreatConnect and Shodan: Enrich threat data to enhance decision making

ThreatConnect and Shodan have partnered to deliver the Shodan Playbook App. This app allows you to retrieve multiple types of enrichment information for IOCs. Additionally, it allows you to craft custom Shodan searches to retrieve result sets based on factors such as software versions being run, services running, open ports, and more. You can even […]

Posted Aug 4th, 2020

Incident Response

ThreatConnect and Tanium: Improved Incident Response with Intel Packages

ThreatConnect and Tanium’s partnership just got stronger. Recently, we released 3 Apps for Tanium Threat Response as well as developed a brand new Playbook App for Tanium Platform. With these Playbook Apps, you can take immediate action to investigate, stop, and remediate potential threats at the endpoint based on external threat intelligence. Let’s dive in! […]

Posted Jun 30th, 2020

Incident Response

Best Practices: Indicator Rating and Confidence

ThreatConnect enables users to assign a Threat Rating and Confidence to every single indicator… but what do those numbers really represent? In order to enable your organization to make the best decisions, it’s important to standardize on the connotation attached to these ratings. When your analysts, defensive integrations, and leadership all speak the same language […]

Posted Nov 24th, 2015