Security Operations Archives - Page 4 of 8

Operation Crimson Palace: A Technical Deep Dive

by unitedimaging on June 5, 2024

Sophos Managed Detection and Response initiated a threat hunt across all customers after the detection of abuse of a vulnerable legitimate VMware executable (vmnat.exe) to perform dynamic link library (DLL) […]

Extracting data from encrypted virtual disks: six methods

by unitedimaging on May 13, 2024

For incident responders, a variety of techniques for information retrieval from locked-up VMs Contact us today for more information about SOPHOS cyber security solutions

Sophos named a Leader in the 2024 IDC MarketScape for Worldwide Managed Detection and Response (MDR)

by unitedimaging on April 30, 2024

The IDC MarketScape evaluates the capabilities and business strategies of managed detection and response service providers worldwide. Contact us today for more information about SOPHOS cyber security solutions

The State of Ransomware 2024

by unitedimaging on April 30, 2024

Our fifth annual report reveals how ransomware experiences have changed over the last year, plus brand-new insights into the business impact of an attack. Contact us today for more information […]

Malware campaign attempts abuse of defender binaries

by unitedimaging on April 26, 2024

Command-and-control wares try to sneak onto systems disguised as various vendors; payloads vary, but Sophos customers are protected Contact us today for more information about SOPHOS cyber security solutions

Introducing Sophos Managed Risk, Powered by Tenable

by unitedimaging on April 3, 2024

Sophos Managed Risk combines vulnerability management technology from Tenable with Sophos’ threat expertise as a fully managed service. Contact us today for more information about SOPHOS cyber security solutions

Remote Desktop Protocol: The Series

by unitedimaging on March 20, 2024

What is RDP, why is it a very nearly ubiquitous finding in incident response, and how can investigators run it to ground it when it goes wrong? An Active Adversary […]

Remote Desktop Protocol: Exposed RDP (is dangerous)

by unitedimaging on March 20, 2024

Is it really that risky to expose an RDP port to the internet? What if you change the default port? What if it’s just for a little while? The data […]

Remote Desktop Protocol: How to Use Time Zone Bias

by unitedimaging on March 20, 2024

Where in the world is your attacker? Presenting a less-known but useful event to look for in your logs Contact us today for more information about SOPHOS cyber security solutions

Remote Desktop Protocol: Queries for Investigation

by unitedimaging on March 20, 2024

How can defenders begin to make sense of RDP issues on their networks? We present three powerful tools for investigators’ toolkits Contact us today for more information about SOPHOS cyber […]

Remote Desktop Protocol: Executing the 4624_4625 Login Query

by unitedimaging on March 20, 2024

Keeping an eye on who’s trying to get onto your network – whether or not they’re successful – can pay off on multiple fronts Contact us today for more information […]

Remote Desktop Protocol: Executing the External RDP Query

by unitedimaging on March 20, 2024

On the hunt for successful RDP connections that have entered your network from outside? A step-by-step guide (and a query to get you started) Contact us today for more information […]

Sophos named a Leader in Frost & Sullivan’s 2024 Frost Radar™ for Global Managed Detection and Response

by unitedimaging on March 19, 2024

Sophos has been named a Leader by Frost & Sullivan for Managed Detection and Response Contact us today for more information about SOPHOS cyber security solutions

Sophos named a Leader in the 2024 IDC MarketScape for Worldwide Modern Endpoint Security for Small Businesses

by unitedimaging on March 13, 2024

This IDC MarketScape evaluates how their endpoint security vendors meet the needs of organizations with fewer than 100 employees. Contact us today for more information about SOPHOS cyber security solutions