scanning activity and other unusual behaviors that immediately deviate from the user’s “normal” day-to-day behaviors. • Admin abuse and misuse. Privileged user activity should be monitored closely in all cases, but when an admin account is...
Foreword James Carder CISO & VP, LogRhythm Labs LogRhythm As uncertainties?—?cybersecurity and otherwise?—?swim around us with increased velocity and frequency, it’s always helpful to hear directly from security leaders in the trenches of our...
Review Environment LogRhythm’s latest Threat Lifecycle Management Platform includes many new and enhanced features and behind-the-scenes improvements, primarily focused on reducing detection and response time for security operations and...
WHITEPAPER - NIST 800-53 COMPLIANCE The following tables provide a summary of how LogRhythm supports the NIST 800-53 control requirements and enhancements. In the specific control requirements or enhancements where a control is directly met, a...
SECURITY INTELLIGENCE IN THE PUBLIC SECTOR Executive Summary As state agencies, civilian agencies and military branches grow more dependent on systems and communications in cyberspace, defending the underlying infrastructure and information and the...
The situation was an obvious case of compromised user credentials. A corporate end user should typically not be logging in simultaneously from two geographically separate locations. In response, the organization’s Security Operations Center (SOC)...
27 Appendix A: Malware Sample Metadata 27 Sample: Symantec- Worst Passwords List 2016.xls 29 Sample: Special Offers.xls 31 Sample: 57ef.xls 33 Sample: test.xls 35 Sample: a30f.xls 35 Sample: 0c64.xls 36 Sample: mainfile.xls 36 Sample: users.xls 37...
THE RANSOMWARE THREAT: A GUIDE TO DETECTING AN ATTACK BEFORE IT’S TOO LATE A Rapidly Growing Threat: A Scourge Called Ransomware Over the past three years, ransomware has jumped into the spotlight of the cyber threat landscape. Kaspersky Lab...
THE THREAT LIFECYCLE MANAGEMENT FRAMEWORK Preface Globally, sophisticated cyber-attacks are compromising organizations at an unprecedented rate and with devastating consequences. Modern attackers, including criminal organizations, ideological...
