Detection of Prevalent Threats by Distributed Deception
Today’s breaches are overwhelmingly carried out in a series of sophisticated, multi-stage attacks. The stages of such attacks can best be described by a “Cyber Kill Chain,” which as per MITRE ATT&CK Adversary Tactic Model [1] breaks down cyber intrusions into the...
A Game Between Adversary and Defender
The motivation for this blog is a question that has been circling in my head for a long time, and I have asked this question to many security analysts: Have they played a game with an adversary? or in other words – Have they engaged with an adversary? I got...
WannMine – Lateral Movement Techniques
Acalvio Threat Research Labs Introduction: Cryptominer is quickly becoming one of the greatest threats that is facing our industry. Similar to ransomware, it provides an easy avenue for a threat actor to monetize his/her skills. In one of the earlier blogs, we...
Technical Analysis of Samsam Ransomware.
Ransomware continues to represent the most critical threat facing organizations in 2018. In the latest breaches at Hancock Memorial Hospital, Adams Memorial Hospital, and Allscripts, SamSam ransomware was used to encrypt the files. In this blog, we dive into the...
Ransomware Command and Control Detection using Machine Learning
Authors: Deepak Gujraniya, Mohammad Waseem, Balamurali AR, and Satnam Singh Since the first attack in 1989 [1], ransomware attacks have gained popularity. Especially in 2017, it has created havoc in every possible industry, including the government offices,...
Acalvio RSS Feed
- Protecting Microsoft Active Directory Part 3: Deception-based AD Security September 22, 2021Previously, we covered understanding AD Attack Surface and AD Attack Paths on this Active Directory Protection blog series. This post looks at Acalvio’s novel approach to protecting Active Directory against advanced persistent threats. It presents a critical attack surface that needs continuous monitoring for misconfigurations, vulnerabilities, and attack persistence. Alternative solutions attempt to protect AD […]Team Acalvio
- Protecting Microsoft Active Directory Part 2: Attack Paths August 14, 2021In a previous blog, we provided an overview of the (unfortunately quite complex) Active Directory Attack Surface. In Part 2 of this series, we’ll explore how attackers plan their movement and traverse attack paths once they have discovered AD vulnerabilities and misconfigurations that they can exploit. The Microsoft Active Directory (AD) ecosystem consists of all […]Team Acalvio
- Protecting Microsoft Active Directory: Understanding the Attack Surface July 21, 2021In the recent SolarWinds hack and Ransomware attack on Colonial Pipeline, Active Directory (AD) compromise was at the core of the attack playbook. In this 3-part blog series, we look at protecting Microsoft Active Directory – which is central to most enterprise infrastructure layouts.Team Acalvio
- OT Risk Management – Deceiving Your Way to IT/OT Convergence June 24, 2021Securing Operational Technology (OT) networks is definitely “a thing” these days. OT environments include specialized equipment (e.g. PLCs) that monitor and control production facilities such as refineries, manufacturing plants and utilities. The stakes are high with respect to potential business continuity and safety impacts if something is compromised. To be sure, it’s not that CISOs […]Team Acalvio
- Acalvio Customer Reference – Consumer Packaged Goods June 20, 2021 Team Acalvio
- Acalvio ShadowPlex Customer Reference Research University May 21, 2021 Team Acalvio
- Tales from the trenches: Effective managed cyber threat detection and response February 19, 2021Breaches can take minutes or less for a cyber criminal to execute but often months to discoverTeam Acalvio
- Customer Reference Industrial Manufacturer February 6, 2021 Team Acalvio
- Acalvio Customer Reference Consumer Services February 6, 2021 Team Acalvio
- Threat Hunting the Modern Way January 31, 2021When you think threat hunting, what comes to mind? For most enterprise security staff, the answer is “Hmmm, not sure if that’s for me”.Team Acalvio