Unit 42: Identity-Based Attacks Drive 90% of SOC Incidents

Sun, 09 Aug 2026 11:41:42 +0000

Engineer — Skip
SOC/IR — Learn: Unit 42’s analysis of identity-based attack patterns offers context for triage judgment and detection prioritization, though no specific IOCs or new TTPs are surfaced in the summary.
Leader — Learn: The 90% statistic is a potential board-deck data point, but without independent corroboration of the underlying methodology this is vendor-sourced framing rather than actionable risk input.

Why Modern SOCs Need Multi-Layered Detections

Wed, 22 Jul 2026 12:46:13 +0000

Engineer — Skip
SOC/IR — Learn: High-level argument that malware-free attacks now dominate (~79% per CrowdStrike data) reinforces the case for behavioral and identity-based detection layers alongside EDR; no specific TTPs or tooling to act on immediately.
Leader — Learn: The framing that AI-equipped attackers are outpacing traditional defenses is useful context for board-level discussions about detection investment, but the piece offers no new data beyond vendor-cited statistics.