Security Operations: Page

Top AI security certifications to consider

AI security certifications, much like AI itself, are evolving. Does it make sense to go through the time and money to obtain a credential, given how quickly the field is changing?

By Jerald Murphy , Sharon Shea • Oct. 30, 2024

How to configure and customize Kali Linux settings

Learning how to use Kali Linux for ethical hacking and penetration testing? Read step by step how to configure and customize the distribution.

By Packt Publishing, Kyle Johnson • Oct. 29, 2024

Insider threat hunting best practices and tools

Detecting threats coming from inside the organization presents unique challenges. Insider threat hunting helps identify potential threat actors and proactively deal with them.

By Jerald Murphy • Oct. 28, 2024

Types of cybersecurity controls and how to place them

A unilateral cybersecurity approach is ineffective in today's threat landscape. Learn why organizations should implement security controls based on the significance of each asset.

By Packt Publishing, Isabella Harford • Oct. 28, 2024

Equipment to include in a computer forensic toolkit

Computer forensic investigators require more than software to do their job. Learn what equipment constitutes a complete computer forensic toolkit.

By Packt Publishing, Kyle Johnson • Oct. 24, 2024

EDR vs. SIEM: Key differences, benefits and use cases

Endpoint detection and response and security information and event management tools offer organizations benefits, but each plays a specific role, so it's worth having both.

By Ravi Das • Oct. 24, 2024

EDR vs. EPP: How are they different and which is right for you?

Endpoint detection and response tools and endpoint protection platforms offer similar security features. Which is better for your organization: EDR, EPP or both?

By Paul Kirvan • Oct. 24, 2024

Threat intelligence vs. threat hunting: Better together

Understanding and using threat intelligence and threat hunting together provides enterprises with a well-rounded security posture. Find out how to build your plan.

By Amanda Scheldt • Oct. 22, 2024

How to detect DDoS attacks

DDoS attacks are on the rise -- again. While they usually strike without warning, there are some red flags to be aware of. Rapid detection is key to surviving such an attack.

By Michael Cobb • Oct. 22, 2024

7 common intrusion detection system evasion techniques

Malicious attackers use various evasion tactics to infiltrate networks without intrusion detection systems noticing. Learn what these techniques are and how to mitigate them.

By Ravi Das • Oct. 15, 2024

What is extended detection and response (XDR)?

Extended detection and response (XDR) is a technology-driven cybersecurity process designed to help organizations detect and remediate security threats across their entire IT environment.

By Paul Kirvan , Sean Kerner • Oct. 10, 2024

What is OPSEC (operations security)?

OPSEC (operations security) is an analytical process that military, law enforcement, government and private organizations use to prevent sensitive or proprietary information from being accessed inappropriately.

By Linda Rosencrance, Ben Cole, Robert Sheldon • Oct. 9, 2024

How to use security as code to achieve DevSecOps

Security as code helps organizations achieve DevSecOps and shift-left security. Learn about SaC's benefits, challenges and implementation best practices.

By Paul Kirvan • Oct. 7, 2024

How to conduct firewall testing and analyze test results

A misconfigured firewall can wreak havoc throughout your organization. Firewall testing to ensure rules are written correctly and that any changes are validated is critical.

By Damon Garn • Oct. 4, 2024

Risk & Repeat: Inside the Microsoft SFI progress report

The first Secure Future Initiative progress report highlighted improvements to Microsoft's security posture. But the company still faces major SecOps challenges.

By Rob Wright • Sept. 30, 2024

ASPM vs. ASOC: How do they differ?

Application security posture management and application security orchestration and correlation tools both aim to secure applications but use different methodologies.

By Dave Shackleford • Sept. 23, 2024

Explaining cybersecurity tabletop vs. live-fire exercises

Tabletop games and live-fire exercises are two ways to test the effectiveness of enterprise security controls and defenses. Discover how each works and how they differ.

By Rob Shapland • Sept. 16, 2024

Microsoft Copilot for Security: 5 use cases

Copilot for Security can assist security pros -- from managers and CISOs to incident responders and SOC members -- in maintaining security posture and addressing security gaps.

By Matthew Smith • Sept. 16, 2024

How AI could change threat detection

AI is changing technology as we know it. Discover how it's already improving organizations' ability to detect cybersecurity threats and how its benefits could grow as AI matures.

By Mary Pratt • Sept. 13, 2024

What is threat detection and response (TDR)? Complete guide

Threat detection and response (TDR) is the process of recognizing potential cyberthreats and reacting to them before harm can be done to an organization.

By Phil Sweeney • Sept. 12, 2024

Threat hunting frameworks, techniques and methodologies

Threat hunting's proactive approach plays a vital role in defending against cyberattacks. Learn about the frameworks, methodologies and techniques that make it so effective.

By Dave Shackleford • Sept. 6, 2024

What is MXDR, and do you need it?

Managed extended detection and response (MXDR) is an outsourced service that collects and analyzes threat data from across an organization's IT environment.

By Char Sample • Sept. 6, 2024

What is threat hunting? Key strategies explained

If you are ready to take a more proactive approach to cybersecurity, threat hunting might be a tactic to consider. Here's what security teams should know.

By Ed Moyle • Sept. 5, 2024

Use AI threat modeling to mitigate emerging attacks

AI threat modeling can help enterprise security teams identify weaknesses in their AI systems and apps -- and keep bad actors from exploiting them.

By Amy DeCarlo , Alissa Irei • Sept. 4, 2024

How AI will transform vulnerability management for the better

Artificial intelligence is improving how enterprises address security vulnerabilities, resulting in stronger security postures and smaller attack surfaces. Learn more.

By John Burke • Aug. 29, 2024