Google Targets SOC Overload With Automated AI Alert and Malware Analysis Tools https://www.securityweek.com/google-targets-soc-overload-with-automated-ai-alert-and-malware-analysis-tools/ #ArtificialIntelligence #ThreatIntelligence #agenticAI #Mandiant #google #SOC #AI
Google Targets SOC Overload With Automated AI Alert and Malware Analysis Tools https://www.securityweek.com/google-targets-soc-overload-with-automated-ai-alert-and-malware-analysis-tools/ #ArtificialIntelligence #ThreatIntelligence #agenticAI #Mandiant #google #SOC #AI
Investigation Scenario
PowerShell Script Block Logging (EID 4104) reveals the pictured command was executed:
What do you look for to investigate whether an incident occurred and its extent?
Security Operations Firm ReliaQuest Raises $500M at $3.4B Valuation – Source: www.securityweek.com https://ciso2ciso.com/security-operations-firm-reliaquest-raises-500m-at-3-4b-valuation-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CybersecurityFunding #CyberSecurityNews #securityweekcom #securityweek #ReliaQuest #funding #SOC
Security Operations Firm ReliaQuest Raises $500M at $3.4B Valuation https://www.securityweek.com/security-operations-firm-reliaquest-raises-500m-at-3-4b-valuation/ #CybersecurityFunding #ReliaQuest #funding #SOC
Security Operations Firm ReliaQuest Raises $500M at $3.4B Valuation https://www.securityweek.com/security-operations-firm-reliaquest-raises-500m-at-3-4b-valuation/ #CybersecurityFunding #ReliaQuest #funding #SOC
Looking forward to learning more about this libre-licensed RISC-V SoC with Kazan GPU and VPU.
https://www.crowdsupply.com/libre-risc-v/m-class
I'm really curious how these types of chips are prototyped. I know we can simulate a few hundred thousand logical operations with an FPGA, but is that even close to simulating a powerful chip of this size?
2025-03-28 RDP #Honeypot IOCs - 181569 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
138.199.24.6 - 91545
156.146.57.110 - 42849
156.146.57.52 - 10716
Top ASNs:
AS60068 - 93561
AS212238 - 64269
AS135161 - 10653
Top Accounts:
hello - 181455
Test - 33
eltons - 15
Top ISPs:
DataCamp Limited - 93561
Datacamp Limited - 64269
GMO-Z.COM PTE. LTD. - 10653
Top Clients:
Unknown - 181569
Top Software:
Unknown - 181569
Top Keyboards:
Unknown - 181569
Top IP Classification:
hosting & proxy - 160374
hosting - 10710
Unknown - 10440
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/BiF6s8Jh
Free Cybersecurity Webcasts from SANS — Now Open for Registration!
SANS Institute has released its latest schedule of free, expert-led webcasts throughout 2025. Topics span the most critical areas of cybersecurity today:
Microsoft Defender for Cloud – Best practices & insights
ICS Security & Management of Change – Resilience and risk
Threat Intelligence & SOC Trends – Based on global survey data
Multicloud & GenAI Security – How organizations are adapting
Attack Surface Management – Stay ahead of hacker tactics
Flexible live or on-demand viewing
Earn CPE credits
Stay current on the latest in cyber
This is a great opportunity for pros at all levels to grow their skills and stay sharp in a fast-evolving field.
#CyberSecurity #SANS #ProfessionalDevelopment #FreeTraining #ThreatIntel #SOC #CloudSecurity
@sans_isc
@sans_isc@mastodon.social
I registered for the general portion of the show just in case I happen to be in San Jose, CA on the date of the conference. However, I really wish I lived close enough to attend the developer sessions
Investigation Scenario
You’ve received an alert derived from a Sigma rule indicating a short name path was used in the command line.
Sigma Rule Source: https://github.com/SigmaHQ/sigma/blob/master/rules/windows/process_creation/proc_creation_win_susp_ntfs_short_name_path_use_cli.yml
What do you look for to investigate whether an incident occurred?
Spring clean your security data: The case for cybersecurity data hygiene https://www.helpnetsecurity.com/2025/03/25/security-data-hygiene/ #Expertanalysis #datamanagement #cybersecurity #Expertcorner #cyberhygiene #Don'tmiss #Hotstuff #strategy #Auguria #opinion #News #SIEM #SOC
@whack At the premium #Apple charges for #SOC #storage I never max it out. I also don’t buy into “oh just attach more external disk!” Especially not with a laptop. #Dongles be damned. I’d like to see #NVMe slots added so we have a cheaper onboard option that enables later #expansion without full system swap.
There are aspects to the Apple #ecosystem I love but, despite Apple silicon, it’s getting much harder not to dump them for #Linux on AMD or pick-an-ARM.