Understanding User Threat Detection With Wine
Step 1: Implement user threat detection. Step 2: Have a glass of wine. In my previous blog posts, I talked about pattern-based vs. rules-based user behavior analytics (UEBA), modeling user activity to...
The benefits of embedded user behavior analytics (UEBA)
In my previous blog post, I talked about user behaviors that you want to model in order to capture a wide array of anomalies as well as how to use them to detect patterns of suspicious user activity. ...
Modeling User Behavior to Identify Insider Threats
In my previous blog post, I talked about different approaches you can take to identify insider threats in your Windows environment with user behavior analytics — a rule-based vs. pattern-based approac...
Detecting Active Directory breaches: How to Focus on the Needles and Not the Haystacks
One thing is for certain – security has never been so scrutinized and publicized as it has these last few years. IT security spending is the highest it has ever been and yet cyberattacks, and the sto...