Blog

ThreatQ and ThreatQ Investigations work with orchestration and automation tools to provide integrated workflows that optimize time and user experience. Learn how.

This is another installment in a blog series discussing how ThreatQ and ThreatQ Investigations augment and integrate with modern security tools.

One of the capabilities that really ThreatQ apart is that it allows you to easily integrate tools into a single systemic security architecture.

Companies have invested in protection technologies for decades – firewalls, web and email security gateways and endpoint protection. Over time, these technologies have increasingly relied upon threat intelligence to create real-time block lists.

The reality is that breaches happen. The key is responding to them quickly and effectively. Many businesses are reactive when responding to threats. It is, however, possible to be proactive.

Macy’s, Adidas, Panera Bread and Chili’s are just a few of the retailers and merchants who have fallen victim to cyberattacks in the last few months.

There is something so absolutely freeing about staring at the stars. The milky way can be seen without a telescope. However, most stars are not visible to the naked eye.

Healthcare organizations are attractive targets for today’s hackers. The data is comparatively much more valuable, so hackers stand to make big profits.

This is the third and final blog in my series on victimology. Now that we have a relatively decent baseline, we can start to compare other spearphish attacks to these to see if we’ve been targeted previously by this attacker.

Building from our previous spearphish investigation, let’s continue to dissect the robertwanger [at] aol.com spearphish attacks.

In a previous life, I managed two SOCs with 40+ analysts each, where a large component of the team was dedicated to threat intelligence, more specifically victimology.