10 Jan 2021

Sticky Post By HAWKEYE Posted in Managed SOC Services, Security Operations Center, Security Orchestration, SOAR Permalink

SOAR Features and User Cases

Sticky Post By HAWKEYE On January 10, 2021

Organizations are getting bigger and bigger and, because of that a lot of events, activities and data are being generated and triggered, and the scale of these events sometimes reaches to a peak, where analysts are not able to handle them anymore.

Read More

SOAR Features and User Cases January 10th, 2021HAWKEYE

31 Dec 2020

Sticky Post By HAWKEYE Posted in Cyber Threat Intelligence, Managed SOC Services Permalink

Dark Web and Threat Intelligence (DARKINT)

Sticky Post By HAWKEYE On December 31, 2020

Security researchers and Cybersecurity professionals have an immense interest in discovering threat intelligence on the deep web and darknet. This intelligence allows organizations to detect block and prevent threats of all kinds—But first, we need to know, what exactly is the deep web and the Dark Web?

Read More

Dark Web and Threat Intelligence (DARKINT) January 7th, 2021HAWKEYE

23 Dec 2020

Sticky Post By HAWKEYE Posted in Cyber Security, Incident Response Permalink

Ransomware Incident Response Plan – Part 2

Sticky Post By HAWKEYE On December 23, 2020

Ransomware was and still is one of the most dangerous attacks that can cause catastrophic consequences to the endpoint system if not responded properly. The following article is specially created for preparing incident response teams against this particular attack, but it is generally excellent guidance for everyone who would like to have clear and step-by-step approach on how to prepare, identify, contain, remediate and recover from the dangerous attacks of ransomware.

Read More

Ransomware Incident Response Plan – Part 2 December 31st, 2020HAWKEYE

18 Nov 2020

Sticky Post By HAWKEYE Posted in Cyber Security, Incident Response Permalink

Ransomware Incident Response Plan – Part 1

Sticky Post By HAWKEYE On November 18, 2020

Ransomware was and still is one of the most dangerous attacks that can cause catastrophic consequences to the endpoint system if not responded properly. The following article is specially created for preparing incident response teams against this particular attack, but it is generally excellent guidance for everyone who would like to have clear and step-by-step approach on how to prepare, identify, contain, remediate and recover from the dangerous attacks of ransomware.

Read More

Ransomware Incident Response Plan – Part 1 December 23rd, 2020HAWKEYE

19 Aug 2020

Sticky Post By HAWKEYE Posted in Cyber Security, Cyber Threat Intelligence, Security Operations Center Permalink

Cyber Threat Intelligence and OSINT

Sticky Post By HAWKEYE On August 19, 2020

We are living in a world where any number of cyber threats can bring an organization to its knees and it can be downright terrifying. Few years ago, threat intelligence first became a new buzzword in cybersecurity. Threat intelligence was not always a concept easily understood by typical IT security professionals.

Read More

Cyber Threat Intelligence and OSINT November 17th, 2020HAWKEYE

16 Aug 2020

Sticky Post By HAWKEYE Posted in Cyber Security, Incident Response, Threat Hunting, Threat Modeling Permalink

Threat Model and Security Considerations For Remote Workers

Sticky Post By HAWKEYE On August 16, 2020

As the world faces uncertain times, due to the spread of the pandemic COVID19 (coronavirus) outbreak, organizations around the world sent hundreds of thousands of employees to work from their home.

Read More

Threat Model and Security Considerations For Remote Workers August 16th, 2020HAWKEYE

14 Jun 2020

Sticky Post By HAWKEYE Posted in Cyber Security, Incident Response Permalink

12 Steps to Secure Your Organization’s Office 365 Accounts Effectively

Sticky Post By HAWKEYE On June 14, 2020

Recently, our Incident response team at HAWKEYE received a frantic call from one of our clients saying that their o365 email accounts seems to have been hacked. One of their investors received an email from an attacker asking them to transfer a huge amount of money to the client with the bank account details.

Read More

12 Steps to Secure Your Organization’s Office 365 Accounts Effectively June 14th, 2020HAWKEYE

09 Jun 2020

Sticky Post By HAWKEYE Posted in Email Security Permalink

What to Train Your User for Effective Email Security

Sticky Post By HAWKEYE On June 9, 2020

User’s is the most vulnerable asset for any organization. We can deploy security controls for any other vulnerability, but not user behavior. User ignorance or negligence has always had a high role in any data breaches or financial frauds in most of the reported cases. So, what to train them for effective email security?

Read More

What to Train Your User for Effective Email Security June 9th, 2020HAWKEYE

01 Jun 2020

Sticky Post By HAWKEYE Posted in Cyber Security, Cyber Threat Management, Managed Security Services, Managed SOC Services, Security Operations Center Permalink

Cyber Threat Management with MITRE ATT&CK – Part 1

Sticky Post By HAWKEYE On June 1, 2020

Let’s agree on this first, job of a SOC analyst is TOUGH, as tough as finding a needle in a haystack. Threat hunters are mostly presented with thousands of logs and telemetry data every second and are supposed to identify threat adversaries from this pool of information. This is one challenge which can fatigue both the human and machine intelligence.

Read More

Cyber Threat Management with MITRE ATT&CK – Part 1 June 1st, 2020HAWKEYE

11 May 2020

Sticky Post By HAWKEYE Posted in Cyber Security, Security Orchestration Permalink

Automated Threat Response with SOAR

Sticky Post By HAWKEYE On May 11, 2020

Earlier, there were very few options available to sneak into an organisation’s network. Today, the ways in which cyber criminals can get into an organisation has dramatically increased. There are multiple vulnerable platforms such as cloud data centers, mobile devices, file sharing platforms, IoT devices and many more that provide uncountable ways that compromise the network security.

Read More

Automated Threat Response with SOAR May 11th, 2020HAWKEYE