Detecting Unauthorized Behavior From Legitimate Accounts

Incident Responders face an almost insurmountable amount of log events, and the move to the Cloud has only intensified this dependency on log data for intrusion analysis.Attackers are shifting techniques to utilize compromised accounts to hide their activity among the volume of legitimate business...

By

Rodney Caudle

June 22, 2022

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR_-_Blog_-_How_AI_and_ML_are_Changing_Mobile_Device_Forensics_Investigations_340_x_340.jpg

Digital Forensics, Incident Response & Threat Hunting

How AI and ML are Changing Mobile Device Forensics Investigations

One of the biggest challenges with AI comes with determining whether the artifact in question was generated by a human behind the keyboard or by AI.

Domenica Crognale

Spring 2024 Update FOR585 Smartphone Forensic Analysis In Depth

Digital Forensics, Incident Response & Threat Hunting

Spring 2024 Update: Explore the Latest Enhancements to SANS FOR585: Smartphone Forensic Analysis In-Depth

We are excited to announce the latest update to the SANS Institute's FOR585: Smartphone Forensic Analysis In-Depth!

Heather Mahalik Barnhart

Security Awareness, Cybersecurity Leadership, Cloud Security, Open-Source Intelligence (OSINT), Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting, Cybersecurity and IT Essentials, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Artificial Intelligence (AI)

A Visual Summary of SANS New2Cyber Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS New2Cyber Summit 2024