Insider Threat Series: From Blue Team’s perspective
Insider Threat is an overarching problem. Because there is no single tool could comprehensively cover Insider Threat. Insider Threat Detection needs building blocks of.
Insider Threat Series – 1: Various data exfiltration via AWS and how to detect them
PrefaceDetecting Data Exfiltration can be a daunting task. One of the more common use-case is the detection of users exfiltrating data via USB drives..
Insider Threat Series: From the Incident Detection and Response perspective
Quick words It has always been astounding about the amount of attack surfaces that we have within an organization for insider to exfiltrate data.