Security Operations: Page
-
Expert Advice
Automated patch management: 9 best practices for success
Automating the patching process is almost a necessity, especially in large organizations. Here's why, plus pros and cons, tips and best practices for keeping systems up to date.
By Andy Patrizio • April 19, 2024 -
Expert Advice
How to conduct security patch validation and verification
Learn about the validation and verification phases of the security patch deployment cycle, two key steps to ensuring an organization's patch management procedure is proactive.
By Michael Cobb, Felicia Nicastro • April 16, 2024 -
Expert Advice // Intro to breach and attack simulation
Pros and cons of 7 breach and attack simulation tools
Breach and attack simulation software can significantly beef up an organization's network defense strategy. But not all tools are made equally.
By Paul Kirvan • April 12, 2024 -
Expert Advice // How to make NetSecOps a reality
Benefits and challenges of NetOps-SecOps collaboration
Organizations need to tread carefully when planning how to converge their networking and security teams to achieve potential benefits and mitigate the challenges.
By John Burke • April 10, 2024 -
fraud detection
Fraud detection is a set of activities undertaken to prevent money or property from being obtained through false pretenses.
By Alexander Gillis • April 10, 2024 -
Expert Advice
10 enterprise patch management best practices
It might not be the most exciting responsibility, but the value of a well-executed patch management strategy can't be denied. Use these best practices to build a smooth process.
By Andrew Froehlich • April 4, 2024 -
Microsoft Copilot for Security brings GenAI to SOC teams
Microsoft's latest AI-powered tool, now generally available, has been beneficial for security teams regarding efficiency, but infosec experts see some room for improvements.
By Arielle Waldman • April 2, 2024 -
Expert Advice
Cloud computing forensics techniques for evidence acquisition
With the proper tools and methodologies, security teams can provide analysts with the critical pieces required to complete cloud computing forensics investigations.
By Dave Shackleford • April 2, 2024 -
Expert Advice // Fuzz testing techniques and tutorials
Fuzzy about fuzz testing? This fuzzing tutorial will help
Organizations are searching for ways to automate and improve their application security processes. Fuzz testing is one way to fill in some of the gaps.
By Ed Moyle • March 22, 2024 -
Opinion // Omdia Analysts' Perspectives
Surprising ways Microsoft Copilot for Security helps infosec
Microsoft Copilot is the first of many GenAI tools that should help security leaders accelerate their program development and strengthen security postures.
By Dave Gruber • March 19, 2024 -
Opinion // Omdia Analysts' Perspectives
Cloud detection and response is, and will stay, a team sport
CISOs should push for federated technologies, common processes and formal communications between teams to ensure cloud detection and response is effective and efficient.
By Jon Oltsik • March 15, 2024 -
Certified Information Security Manager (CISM)
Certified Information Security Manager (CISM) is an advanced certification that indicates that an individual possesses the knowledge and experience required to develop and manage an enterprise information security (infosec) program.
By Sharon Shea • March 15, 2024 -
Expert Advice
5-step IaaS security checklist for cloud customers
Get expert advice on patching, data encryption, and identity and access management responsibilities in this enterprise IaaS security checklist.
By Ed Moyle • March 7, 2024 -
computer forensics (cyber forensics)
Computer forensics is the application of investigation and analysis techniques to gather and preserve evidence from a particular computing device in a way that is suitable for presentation in a court of law.
By Rahul Awati , Ben Lutkevich • Feb. 27, 2024 -
Expert Advice
Use cloud threat intelligence to protect critical data and assets
Cloud threat intelligence helps identify and analyze cloud-based threats, enabling security teams to better understand attacks and more proactively defend against them.
By Dave Shackleford • Feb. 22, 2024 -
Expert Advice
How to conduct a social engineering penetration test
Social engineering attacks are becoming more sophisticated and more damaging. Penetration testing is one of the best ways to learn how to safeguard your systems against attack.
By Paul Kirvan • Feb. 13, 2024 -
Ransomware preparedness kicks off 2024 summit series
BrightTALK commenced the new year with ransomware readiness, giving viewers workable tips to prevent and recover from a devastating attack. Check out some highlights here.
By Alicia Landsberg • Feb. 13, 2024 -
Expert Advice
Close security gaps with attack path analysis and management
Traditional cybersecurity approaches alone can fall short. Comprehensive attack path analysis and management map out vulnerabilities and help organizations protect key assets.
By Michael Cobb • Feb. 6, 2024 -
SOAR (security orchestration, automation and response)
SOAR (security orchestration, automation and response) is a stack of compatible software programs that enables an organization to collect data about security threats and respond to security events with little or no human assistance.
By Sharon Shea • Feb. 5, 2024 -
Security executives slam Microsoft over latest breach
Criticisms about Microsoft's breach include the lack of multifactor authentication on the targeted account and the company's approach to disclosing information about the attack.
By Alexander Culafi • Jan. 30, 2024 -
indicators of compromise (IOC)
Indicators of compromise are unusual activities on a system or network that imply the presence of a malicious actor.
By Madelyn Bacon, Robert Sheldon • Jan. 29, 2024 -
Expert Advice // How to conduct risk-based vulnerability management
How to rank and prioritize security vulnerabilities in 3 steps
Vulnerability management programs gather massive amounts of data on security weaknesses. Security teams should learn how to rank vulnerabilities to quickly fix the biggest issues.
By Mike Chapple • Jan. 29, 2024 -
digital forensics and incident response (DFIR)
Digital forensics and incident response (DFIR) is a combined set of cybersecurity operations that incident response teams use to detect, investigate and respond to cybersecurity events.
By Sean Kerner • Jan. 26, 2024 -
Top benefits and challenges of SOAR tools
To ensure successful adoption, IT leaders need to understand the benefits of SOAR tools, as well as potential disadvantages. Explore pros, cons and how to measure SOAR success.
By Jessica Groopman, Andrew Froehlich • Jan. 25, 2024 -
Top incident response service providers, vendors and software
Get help deciding between using in-house incident response software or outsourcing to an incident response service provider, and review a list of leading vendor options.
By Paul Kirvan • Jan. 23, 2024