Threat hunting in ICS environments must consider safety. IT and ICS systems have different missions, objectives, impacts during an incident, and different assets like embedded operating systems, and engineering devices speaking non-traditional industrial protocols. Adversaries targeting ICS must use different attack tactics and techniques for access, execution, collection, and persistence, etc., to degrade safety, manipulate control, damage ph...

Threat hunting in ICS environments must consider safety. IT and ICS systems have different missions, objectives, impacts during an incident, and different assets like embedded operating systems, and engineering devices speaking non-traditional industrial protocols. Adversaries targeting ICS must use different attack tactics and techniques for access, execution, collection, and persistence, etc., to degrade safety, manipulate control, damage ph...

Over the past year, the world continued to shift—remote work was extended, sometimes permanently, the workforce expanded in some places and contracted in others, and the concepts of essential work and services were redefined. Throughout all this change, cyber threat intelligence professionals needed to adapt, stay focused, and watch for similar changes in the threat landscape. The 2022 CTI Survey webcast tracks the changes in both the wo...

For centuries, threat intelligence has been a vital tool to guide decision making in response to conflict. As the ICS cyber threat landscape has perpetually shifted to further place private industry in the crosshairs of adversaries, the value proposition for ICS threat intelligence has increased significantly for defenders. While building out an ICS threat intelligence program can sometimes seem like it will take centuries, there are several...

At this year’s Cyber Threat Intelligence Summit, you’ll have the chance to learn, connect, and share with thousands of cybersecurity professionals in attendance from around the globe. No matter your background or skill level, you’ll walk away from CTI Summit with interesting perspectives and case studies that challenge CTI assumptions and result in a shift in your understanding. Register now to enjoy: Two Days of Highly Techn...

There has been much ado about extended detection and response (XDR) and its promise to solve long-standing problems in security. Security teams need an integrated awareness, detection, and response capability that starts with actionable, relevant, prioritized intelligence. Many organizations are considering an XDR implementation but are eager to understand how XDR helps them achieve a higher level of resilience against mounting security threat...

Join members of the SANS Industrial Control Systems (ICS) Team in a new ICS Webcast Series: ICS Cyber Resilience, Active Defense & Safety. Presenters will address the recent increase in attack campaigns and impacts seen across multiple sectors in the ICS space. Topics of discussion will include ransomware impacting critical infrastructure, detecting advanced adversaries inside ICS networks, and a variety of other threats and defenses. This...

Cyber42: Industrial Edition will put you through the paces as an industrial control system (ICS) security manager as players adapt to challenges in operational technology (OT) environments. Unlike traditional IT networks, industrial equipment is designed to impact the physical world and require special considerations when deploying security technologies. As threats continue to rise targeting these networks, many of which are vital for critical...

With cyber-attacks surging and taking down the likes of hospitals, gas pipelines, and a string of grocery stores, it’s best to keep an eye on evolving threats so you can protect yourself. Join Symantec’s Domingo Guerra and Kevin Haley for a webinar Dec. 9, 2021, 3:30-4:30 ET, where we will discuss how these attacks are being executed, what are their targets and how to keep your organization secure. In this session, you will: See fa...

Active Directory domains are living, ever-evolving assets that organizations need to secure now. Adversary success rates depend on mis- or loosely configured domains to harvest credentials, move laterally, and achieve their objectives. Luckily for defenders, the best Active Directory defense is a proactive defense: one that provides immediate and vital insight organizations can use to protect their domains. In this review, SANS instructor and...