Sitemap

Posts by category

• Category: Uncategorized
  • 64 bit Quarian APT Malware
• Category: Threat Research
  • Playbook Fridays: Conducting VMRay Malware Analysis
  • A Song of Intel and Fancy
  • Duping Doping Domains
  • Playbook Fridays: Task Management
  • Fancy Bear Pens the Worst Blog Posts Ever
  • Playbook Fridays: How to Query Abuse.net with Playbooks
  • DNC Association Does Not Compute
  • Track to the Future
  • Finding Nemo(hosts)
  • Phantom of the Opaera: New KASPERAGENT Malware Campaign
  • When Dumpster Fires Make You WannaCry
  • The Technical Blogs and Reports Source
  • Parlez-vous Fancy?
  • Research One: A ThreatConnect Story
  • Stepping to Fancy Bear
  • Do You Make Swords, or Do You Wield Them?
  • Hacktivists vs Faketivists: Fancy Bears in Disguise
  • 7 Threat Intelligence Tools Your Cybersecurity Team Needs
  • Let's Get Fancy
  • A Tale of Two Targets
  • Can a BEAR Fit Down a Rabbit Hole?
  • Russian Cyber Operations on Steroids
  • FANCY BEAR Has an (IT) Itch that They Can't Scratch
  • Guccifer 2.0: All Roads Lead to Russia
  • Guccifer 2.0: the Man, the Myth, the Legend?
  • What's in a Name Server?
  • Shiny Object? Guccifer 2.0 and the DNC Breach
  • Rebooting Watergate: Tapping into the Democratic National Committee
  • Sending Aspiring Jedi Knights to Dagobah System
  • ThreatConnect Aids Novetta Research for Operation Blockbuster
  • Threat Intelligence in 3rd Party Risk Assessment
  • Threat Intelligence-Driven Risk Analysis
  • CameraShy: Infrastructure Analysis
  • Camerashy on You Crazy Diamond
  • Project CAMERASHY: Closing the Aperture on China’s Unit 78020
  • China Hacks the Peace Palace: All Your EEZ’s Are Belong to Us
  • OPM Breach Analysis: Update
  • OPM Breach Analysis
  • Adversary Intelligence: Getting Behind the Keyboard
  • Premera Latest Healthcare Insurance Agency to be Breached
  • The Anthem Hack: All Roads Lead to China
  • Operation Poisoned Helmand
  • Holiday Aspxor Mimics Retailers
  • Operation SMN: From Sharing to Acting on Threat Intelligence
  • Debugging the Pakistan Cyber Army: From Pakbugs to Bitterbugs
  • Operation Arachnophobia: The Spy-der Who Loved Me
  • Piercing the Cow's Tongue: China Targeting South China Seas Nations
  • ThreatConnect Enables “Healthy Networking” for the Biomed and Life Sciences Industry
  • Old Habits Die Hard: Iterative Intelligence & Comment Crew Activity
  • Getting “Left of Boom": How ThreatConnect Enables Proactive Cybersecurity
  • ThreatConnect Gets to the Root of Targeted Exploitation Campaigns
  • The Dollars and "Sense" Behind Threat Intelligence Sharing
  • Divide and Conquer: Unmasking China's 'Quarian' Campaigns Through Community
  • Khaan Quest: Chinese Cyber Espionage Targeting Mongolia
  • ThreatConnect Officially Launches an Exclusive Subscriber Community with Advanced Threat Shares
  • Where There is Smoke, There is Fire: South Asian Cyber Espionage Heats Up
  • Killing with a Borrowed Knife: Chaining Core Cloud Service Profile Infrastructure for Cyber Attacks
  • Hiding in the Clouds: Leveraging Social Media for Cyber Attacks
  • Rising from the Ashes: The Return of the Crew
  • APT #TargetedAttacks within @SocialMedia
  • A Tale of Two Koreas: Keeping Watch over the Digital DMZ
  • Network Health: Advanced Cyber Threats to the Medical & Life Sciences Industries
  • Hipster-Analytics: Throwback Analysis of an Overlooked Advanced Persistent Threat
  • I Got 99 Problems But a Phish Ain’t One
  • Burning Down the House for Fun and Profit
  • Just the Tip of the Iceberg
  • Victim-nomics: Estimating the “Costs” of Compromise
  • There's something about Mahdi
• Category: ThreatConnect Events
  • ThreatConnect’s Top 5 CAN’T MISS things to do while at the 2017 RSA Conference USA!
  • ThreatConnect at RSA 2017
  • ThreatConnect at FS-ISAC Fall Summit
  • ThreatConnect at Virus Bulletin International Conference
  • ThreatConnect at SANS CDI
  • ThreatConnect at Splunk .conf2016
  • Intel’s in the way that you use it, Snoke don’t you know
  • ThreatConnect 4.0 : Now with a Real Dashboard
• Category: How-to Guides
  • Playbook Fridays: OneMillion API Component
  • 10 Things Security Analysts Can Do for Free in TC Open
  • Playbook Fridays: Domain Spinning Workbench Spaces App
  • ThreatConnect 5.7 Release Shows Advancements in Playbooks Capabilities
  • Top 5 ThreatConnect Resources for Malware Analysis
  • Playbook Fridays: How to Use ThreatConnect Playbooks to Manage Security APIs
  • The Power and Responsibility of Customer Data and Analytics
  • Query a Host or URL Indicator in Archive.org's Wayback Machine
  • Playbook Fridays:  Using Playbooks to populate custom attributes
  • Please Do Not Feed the Phish
  • Playbook Fridays: Have You Been Pwned?
  • Best Practices for Dashboards in Cybersecurity and Threat Intelligence
  • Playbook Fridays: Taking Screenshots with a Playbook
  • Playbook Fridays: How to Control the Cloud with Playbooks
  • Playbook Fridays: Enriching Indicators with Shodan
  • Casting a Light on BlackEnergy
  • Playbook Fridays: How to Build a Playbook in ThreatConnect
  • 5 Ways to Make Threat Analysis Actionable
  • Get Started with Cyber Threat Analysis: How to Research Ransomware
  • Spring Cleaning: Managing Indicator Deprecation
  • Did You Know We Have A Knowledge Base?
  • Step 5: Automation is Key
  • Step 4: Collaborate and Share
  • How Companies Use ThreatConnect To Create a System of Record: A Use Case
  • Step 3: Prioritize Your Data
  • How Companies Use ThreatConnect to Make Their Cybersecurity Programs More Efficient: A Use Case
  • How Companies Use ThreatConnect When Building Their Cybersecurity Program: A Use Case
  • Step 2: Determine Threat Data Context & Relevance
  • Step 1: Collect and Correlate Relevant Threat Data
  • What is a Cyber Threat? How to Explain Cyber Threats to Your CEO
  • How to Manage and Integrate Signatures in ThreatConnect
  • Growing a Threat Intelligence Program is like Growing a Beard
  • Best Practices: Indicator Rating and Confidence
  • Community-Source Your Cybersecurity Concerns
  • 5 Tips For Effective Threat Intelligence
  • ThreatConnect How To: Pivoting & Exporting Data
  • ThreatConnect How To: Importing Indicators
  • Getting Back to the Basics of Actionable Threat Intelligence
  • How To Streamline Threat Intel Sharing Before Lunch
• Category: Blog
  • Playbook Fridays: Github Activity Monitor
  • Playbook Fridays: Punycode Decoder/Encoder App
  • ThreatConnect's RSA Archer Integration, Playbooks, and Apps (oh my!)
  • Playbook Fridays: Web Page Monitoring
  • Playbook Fridays: Associated Indicator Metadata Creator
  • Playbook Fridays: Group and Indicator Comment Link Creators
  • Playbook Fridays: Robtex ASN Query and Robtex IP Query
  • Playbook Fridays: Google Alerts RSS Reader
  • Playbook Fridays: QRadar Tag Search in ThreatConnect
  • ThreatConnect Introduces Version 5.6
  • ThreatConnect achieves ISO 27001:2013 certification
  • Playbook Fridays: Document Parsing and Keyword Scanning/Tagging
  • How to Choose the Right Threat Intelligence Platform for You
  • Kinetic and Potential Energy Framework: Applying Thermodynamics to Threat Intelligence
  • Building Daily Habits to Stay Ahead of Security Fires
  • ThreatConnect and the Rise of the Security Developer
  • Playbook Fridays: Forcing Active Directory (AD) Password Resets via ThreatConnect Victims
  • Introducing ThreatConnect's Intel Report Cards
  • Just the TIP of the Iceberg: Categorizing the Evolving Threat Intelligence Platform
  • 5 Things to Do at RSA 2018
  • Don't Get Caught Up in the Hype of AI for Security
  • When You're a Platform, Everything Else is a Tool
  • ThreatConnect Provides a Report on Healthcare and Medical Industry Threats
  • ThreatConnect Training: Save Time and Act Faster with Playbooks
  • Sharing Threat Intelligence Using STIX-TAXII
  • ThreatConnect Introduces its Multi-Environment Orchestration Capability
  • How to Use Threat Intelligence & Orchestration to Defeat Stranger Threats
  • The Tao of Intel Driven Security
  • Maturing Your Cybersecurity Program
  • Demystifying Intelligence Analysis
  • Getting Started with the ThreatConnect Query Language (TQL)
  • What is a Security Operations and Analytics Platform?
  • Getting Started with Threat Intelligence: A Guide for the ONG Community
  • There's More to Life than Zero-Days
  • (Un)Intended Side Effect of a Platform like ThreatConnect: Job Satisfaction
  • Getting Started with Threat Intelligence: A Guide for Retailers
  • Save Time and Accomplish More with Playbooks
  • Step 6: Integrate Your Cybersecurity Tools and Systems
  • Share The Love: Using ThreatConnect as a Threat Intelligence Sharing Platform for ISACs, ISAOs, and their Members
  • The FORCE of STIX & TAXII: Why STIX & TAXII are so Important to Financial Services Companies & EMEA
  • Measuring the Detection and Response Gap
  • Threat Intelligence Doesn't Have to Be Inconceivable
  • Towards Data-Driven Threat Analysis
  • ThreatConnect Shares Incident Information on Turla APT satellite-based infrastructure
  • ThreatConnect Shares Incident Information on Typosquatting Domains
  • ThreatConnect details Cancer Foundation Domain Squat Incident
  • ThreatConnect details Westin Resort Domain Squat Incident
  • ThreatConnect Shares Incident Information on a Phishing Page Serving Fake Login for University
  • ThreatConnect’s Top 5 Things to Do While at the 2016 FS-ISAC Fall Summit
  • ThreatConnect Shares Incident Information on Major Financial Institution Domain Squat
  • Cybersecurity Heroes Wield the Power of ThreatConnect
  • Belling the BEAR
  • Cyber Stratego: Strategic vs. Tactical Threat Intelligence
  • Rock-Paper-Haxors
  • Does a BEAR Leak in the Woods?
  • ThreatConnect Shares Incident Information on PhotoMiner malware found on FTP servers
  • ThreatConnect Shares Incident Information on Malware Spoofing Domains
  • ThreatConnect Shares Incident Information on an Exxon Mobil Domain Squat Employment Scam
  • ThreatConnect Shares Incident Information on PhotoMiner Worm Malware
  • ThreatConnect Shares Incident Information on Infected Pokemon Go Android Malware
  • ThreatConnect Shares Incident Information on Kivuto FTP Server Hosting Bitcoin Mining Malware
  • ThreatConnect Shares Incident Information on Suspicious Domains on Bitcoin DNS Nameservers
  • ThreatConnect Shares Incident Information for a new CryptXXX Ransomware Trojan
  • May the Fourth be with you: A Star Wars InfoSec Bibliography
  • ThreatConnect Shares Incident Information on Bank of Brazil Phishing Malware
  • Threat Intelligence and the Downfall of the Galactic Empire
  • ThreatConnect Shares Incident Information a digitalmailer requested password change
  • ThreatConnect Shares Incident Information on the Adversary Obi Onyeka
  • ThreatConnect Shares Incident Information for Fake eBay Advertising Pages
  • Chinese APT Yolped Malware and Alcatel-Lucent Incident
  • Credit Agricole Phish
  • Malicious DLL and Satellite Infrastructure: Russian "Turla" APT
  • PROFORMA INVOICE COPY Spam
  • Gootkit Banking Malware
  • Fysbis: Sharing New Sofacy APT Indicators
  • Word Document Trojan Exploiting CVE-2015-2545
  • It's a Bird. It's a Plane. It's China's SuperMan APT
  • SMS SPAM Domains
  • ISAO Standards and Cybersecurity Collaboration: One Year Later
  • 5 Ways TIPs Can Enhance Your SIEM
  • ThreatConnect Episode IV: A New Scope
  • Hunting Adversaries w/ Diamond Dashboard for Splunk
  • 4 Signs of Disconnect Between The Board and The Security Team
  • What’s in a Platform?
  • Why Build Apps in ThreatConnect
  • Threat Intelligence and Risk Management
  • What's the RSA Conference About, Daddy?
  • What the Verizon DBIR Says About Threat Intelligence Sharing
  • White House Initiative on Cyber Threat Sharing: A Good Start
  • Context (and Quality) is King with Threat Intelligence
  • Five Predictions for 2015 Cybersecurity
  • ThreatConnect Lights Up Shellshock
  • ThreatConnect Launches Retail Community for Retailers to Collaborate Around Threat Intelligence
  • Heartburn over Heartbleed: Assuming the Worst
  • Small Businesses – Often Overlooked, but Just as Vulnerable to Cyber Attacks
  • The Foundation of Internet Trust May Be Crumbling - DigiNotar Certificate Authority Breached
  • Malicious Code Goes Mobile
  • Nasdaq Cyber Attack
  • The Rise of Digitally Signed Malware
  • Banks See Increased Cyber Attacks
  • Iranian Cyber Army Strikes Again
  • Cyber Attack on Google and Others
  • Category: All
  • Category: Research
    • Parlez-vous Fancy?
• Category: Product News
  • ROI for Threat Intelligence
  • ThreatConnect Announced as SmartCEO 2015 GovStar Awards Finalist
  • ThreatConnect and Maltego
  • The Cost of Bad Threat Intelligence
  • Threat Intelligence Sharing: Empower Your Cyber Defense
  • ISAC & ISAO Financial Incentives for Sharing Threat Intelligence Emerge
  • Threat Intelligence Sharing is Real
  • ThreatConnect Community Success Story: The Rubber Meets the Road
  • ThreatConnect Communities: A Swiss Army Knife in Your Collaboration Arsenal
  • ThreatConnect Industry Communities - Paying it Forward Produces Big Gains
  • ThreatConnect Announces Investment from Grotech Ventures
  • ThreatConnect Takes Signature Management to the Next Level
  • Quickly Assess Maliciousness of Suspicious Activity with “Analyze"
• Category: Featured Article
  • The Best Threat Intelligence Feeds
  • Cybersecurity Jobs and Impact on Future Training and Education
  • Threat Intelligence Processes are a Journey; Not a Destination
  • Offense Wins Games, Defense Wins Super Bowls
  • How I Prevent a Hack Attack
  • Attacks on Insurers: Lessons Learned
  • Luke in the Sky with Diamonds
  • Threat Intelligence within the Risk Management Process
  • Is Your Threat Intelligence Platform Just a Tool?
  • Getting the Most out of Crowdsourcing Threat Intelligence
  • What is a Threat Intelligence Platform
• Category: Star Wars
• Category: In The News
• Category: Press Releases
• Category: Playbooks