
Who is going to read this threat intelligence report?
The same finding cannot be told to a SOC analyst and a board in one document. A report that does …
Blog
Short answers to questions we meet in the field: reading stealer logs, catching typosquats, managing IOCs, closing cases. Research, operations and product notes.

The same finding cannot be told to a SOC analyst and a board in one document. A report that does …

Examining leaked data does not mean storing it without limit. Purpose, retention and access must be written down up front.