Insider threat detection has become one of the most critical aspects of modern cybersecurity. Unlike external attacks, which originate from outside an organization, insider threats stem from individuals with legitimate access to sensitive systems, data, or facilities. This makes ...
Continue Reading
I was recently able to explore the Splunk software development kit with a customer. This helped me to implement another way to get username...
A few years ago, we added a behavioral algorithm to Plixer Scrutinizer that looked at all the flow data that was collected and determined...
Today we are going to talk about Plixer’s new Flow Analytics algorithm, Reverse SSH Shell, which has been included in the latest Plixer Scrutinizer...
What is STIX/TAXII? STIX stands for Structured Threat Information Expression, which is an open-source language and serialization format used in sharing threat intelligence. Think...
The purpose of this blog is to de-mystify the hype around machine learning (ML) by exploring three topics: What kind of ML is Plixer...
When this pandemic started and nearly the entire workforce went remote, our focus was to maintain the quality of service outside of what was...
I can’t tell you how many calls I’ve been on where the NetOps and SecOps teams really don’t know what the other is doing....
Many ISPs filter bogon connections because bogon IP addresses have no legitimate use. If you find a bogon or bogus IP address in your...
One year ago, we announced our new vision. That is, we believe that SecOps and NetOps provide value for each other, and that value...
