Cybersecurity Incident Response

Smarter Security - How Purple Teaming with the MITRE ATT&CK Framework Boosts Incident Response

Explore our resources about Cyber Incident Response

Topics

Types

Wyndham Improves Threat Detection and Response While Scaling Security Operations

Discover how Wyndham’s security teams enhanced their threat detection and response with ThreatConnect TI Ops and Polarity, streamlining operations and improving efficiency.

Case Studies

Smarter Security – Empowering Threat-Informed Defense & Incident Response with ThreatConnect

Join Lara Meadows and Matt Scheurer as they unravel how ThreatConnect enhances day-to-day cyber defense capabilities with centralized threat intelligence. By spotlighting techniques over indicators, Matt emphasizes the strength of a threat-informed defense strategy, which propels detection, monitoring, and incident response to new heights. Leveraging ThreatConnect’s robust platform, security teams can sift through voluminous data […]

Smarter Security – How Purple Teaming with the MITRE ATT&CK Framework Boosts Incident Response

This session of ThreatConnect’s Smarter Security Series explores the intricate dance between offense and defense in digital security. In “Picky Purple Teamers Pick MITRE ATT&CK,” a talk Matt Scheurer gave at Black Hat 2023, Matt delves into the critical importance of purple teaming, a strategic approach that identifies threats before they materialize. This episode provides […]

Smarter Security – Introducing Matt Scheurer, Assistant CSIRT VP and ThreatReel Host

In this insightful interview, Matt Scheurer and Lara Meadows discuss the evolving landscape of digital forensics, offensive security, and the ever-changing realm of cybersecurity operations. The conversation delves into the complex nature of modern security threats, from the impact of cloud technology on security principles to the challenges of analyzing phishing emails in a cloud-based […]

ThreatConnect For Incident Response

ThreatConnect for Incident Response drives quicker response times with native case management capabilities and relevant intelligence at your fingertips. Make your security teams and your security tools and tech work better together, faster, and more efficiently to make the greatest impact with ThreatConnect Playbooks and set up workflows to support countless use cases. The ThreatConnect […]

Datasheet

Proactive Infrastructure Hunting with ThreatConnect & DomainTools

In this webinar, explore how network defenders and incident responders can effectively and efficiently protect their own organizations.

Webinar

ThreatConnect and DomainTools

Together, ThreatConnect® and DomainTools®Iris Investigate allow security analysts to automate intel processes, investigations, alert triage, and response actions leading to faster detection and response.

ThreatConnect and SlashNext Phishing Incident Response Playbook

SlashNext Phishing URL Analysis and Enrichment enables SOC and IR teams to dramatically reduce the time and effort involved in researching and reporting on suspicious URLs. Whether in emails, network logs, or other digital sources, teams can now get accurate, definitive, automated analysis of suspicious URLs on demand and at scale.

ThreatConnect and Zscaler Internet Access (ZIA)

ThreatConnect® and Zscaler® have partnered to enable joint users to automate their incident response and proactively protect their network from today’s sophisticated attacks.

SANS 2019 Threat Hunting Survey: The Differing Needs of New and Experienced Hunters

The 2019 SANS Threat Hunting Survey gathered current industry data from 575 respondents predominantly from small/medium to medium/large organizations that are working in the field of threat hunting or working alongside threat hunters. This year’s report aims to help organizations understand what threat hunting is, why it is essential to protect their organizations, and how […]

Survey

The Diamond Model: An Analyst’s Best Friend

During this video, 2 of the 3 co-authors of the Diamond Model for Intrusion Analysis, Sergio Caltagirone from Dragos and Andy Pendergast from ThreatConnect, talk about how to properly utilize the Diamond Model for Intrusion Analysis to triage incidents and categorize threat activity. ThreatConnect is the only threat intelligence platform built on the Diamond Model […]

Fidelis Cybersecurity Joint Solution Brief

ThreatConnect® and Fidelis Cybersecurity have partnered to provide users with ThreatConnect intelligence for use within Fidelis Network™. This integration allows automatic synchronization of ThreatConnect indicators to Fidelis Network, enabling users to easily – and quickly – investigate current and historic network activity for the latest threats.