Mapping a cyber attack — the Italian case
Mapping a real Italian intrusion onto the MITRE ATT&CK framework: phases, techniques, telemetry sources and lessons for SOC detection-engineering.
Tag
sfile2
Read the analysis
Cyber Defence: 3 priorities for enterprise security
Three foundational defensive activities every organisation should run continuously: monitoring, detection-engineering and incident response — paired with threat intelligence.
Under Ransomware attack — the story of an incident response
Field account of a ransomware incident response engagement: initial scoping, eradication, recovery decisions and lessons learned about preparation gaps.
