Ransomware Command and Control Detection using Machine Learning
Authors: Deepak Gujraniya, Mohammad Waseem, Balamurali AR, and Satnam Singh Since the first attack in 1989 [1], ransomware attacks have gained popularity. Especially in 2017, it has created havoc in every possible industry, including the government offices,...
Lateral Movement analysis of Zealot Campaign and its detection by Distributed Deception Architecture.
Acalvio Threat Research Labs Web Servers are becoming one of the entry vectors in breaches. In the last blog, I had shared the details of deception based architecture to prevent breaches involving web server as an entry vector. In this blog, we take Zealot campaign...
Acalvio RSS Feed
- Protecting Microsoft Active Directory Part 3: Deception-based AD Security September 22, 2021Previously, we covered understanding AD Attack Surface and AD Attack Paths on this Active Directory Protection blog series. This post looks at Acalvio’s novel approach to protecting Active Directory against advanced persistent threats. It presents a critical attack surface that needs continuous monitoring for misconfigurations, vulnerabilities, and attack persistence. Alternative solutions attempt to protect AD […]Team Acalvio
- Protecting Microsoft Active Directory Part 2: Attack Paths August 14, 2021In a previous blog, we provided an overview of the (unfortunately quite complex) Active Directory Attack Surface. In Part 2 of this series, we’ll explore how attackers plan their movement and traverse attack paths once they have discovered AD vulnerabilities and misconfigurations that they can exploit. The Microsoft Active Directory (AD) ecosystem consists of all […]Team Acalvio
- Protecting Microsoft Active Directory: Understanding the Attack Surface July 21, 2021In the recent SolarWinds hack and Ransomware attack on Colonial Pipeline, Active Directory (AD) compromise was at the core of the attack playbook. In this 3-part blog series, we look at protecting Microsoft Active Directory – which is central to most enterprise infrastructure layouts.Team Acalvio
- OT Risk Management – Deceiving Your Way to IT/OT Convergence June 24, 2021Securing Operational Technology (OT) networks is definitely “a thing” these days. OT environments include specialized equipment (e.g. PLCs) that monitor and control production facilities such as refineries, manufacturing plants and utilities. The stakes are high with respect to potential business continuity and safety impacts if something is compromised. To be sure, it’s not that CISOs […]Team Acalvio
- Acalvio Customer Reference – Consumer Packaged Goods June 20, 2021 Team Acalvio
- Acalvio ShadowPlex Customer Reference Research University May 21, 2021 Team Acalvio
- Tales from the trenches: Effective managed cyber threat detection and response February 19, 2021Breaches can take minutes or less for a cyber criminal to execute but often months to discoverTeam Acalvio
- Customer Reference Industrial Manufacturer February 6, 2021 Team Acalvio
- Acalvio Customer Reference Consumer Services February 6, 2021 Team Acalvio
- Threat Hunting the Modern Way January 31, 2021When you think threat hunting, what comes to mind? For most enterprise security staff, the answer is “Hmmm, not sure if that’s for me”.Team Acalvio