Intelligence-Driven Incident Response with YARA

A review of Rapid7 UserInsight by SANS senior analyst Jerry Shenk. It discusses a tool that highlights user credential misuse while tracking endpoint system details that would be valuable to an incident response team.

By

Ricardo Dias

October 20, 2014

All papers are copyrighted. No re-posting of papers is permitted

Related Content

ransomware 25 340x340.png

Digital Forensics, Incident Response & Threat Hunting, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming

Visual Summary of SANS Ransomware Summit 2025

Check out these graphic recordings created in real-time throughout the event for SANS Ransomware Summit 2025

Blog Teaser: Shoplifting2.0 340x340.jpg

Digital Forensics, Incident Response & Threat Hunting

Shoplifting 2.0: When it’s Data the Thieves Steal

Identify steps organisations can implement to protect against Scattered Spider and DragonForce

Adam Harrison

Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting

The Quest to Summit | SANS ICS Security Summit 2025

Register for the ICS Security Summit to be able to participate in The Quest to Summit and win big prizes.