tag: Soc · 2 items
- Engineer — Skip
- SOC/IR — Learn: Unit 42’s analysis of identity-based attack patterns offers context for triage judgment and detection prioritization, though no specific IOCs or new TTPs are surfaced in the summary.
- Leader — Learn: The 90% statistic is a potential board-deck data point, but without independent corroboration of the underlying methodology this is vendor-sourced framing rather than actionable risk input.
- Engineer — Skip
- SOC/IR — Learn: High-level argument that malware-free attacks now dominate (~79% per CrowdStrike data) reinforces the case for behavioral and identity-based detection layers alongside EDR; no specific TTPs or tooling to act on immediately.
- Leader — Learn: The framing that AI-equipped attackers are outpacing traditional defenses is useful context for board-level discussions about detection investment, but the piece offers no new data beyond vendor-cited statistics.