Accelerating Incident Response: Applying Confidence Aggregation to Defensive Artifacts

Incident response plays an integral role in cybersecurity today. Despite the successes of the cybersecurity industry, the time between an intrusion and its detection remains relatively high. The following research is designed to combat the rising Mean Time to Identify (MTTI) security breaches and...

By

Andrew Russett

March 19, 2024

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Blog_teaser_images_(23).png

Cloud Security, Digital Forensics, Incident Response & Threat Hunting

February 10, 2023

AWS Cloud Log Extraction

In this blog post, we discussed the acquisition of AWS CloudTrails logs stored in S3 buckets.

Megan Roddie-Fonseca

Digital Forensics, Incident Response & Threat Hunting

January 23, 2023

A Visual Summary of SANS CTI Summit 2023

Check out these graphic recordings created in real-time throughout the event for SANS Cyber Threat Intelligence Summit 2023

Cyber Defense, Cybersecurity and IT Essentials, Digital Forensics, Incident Response & Threat Hunting, Offensive Operations, Pen Testing, and Red Teaming

Month of PowerShell: Threat Hunting with PowerShell Differential Analysis

This is the most powerful technique I can share for threat hunting on Windows: differential analysis.