Friday, 09 October 2020 / Published in Incident Response

New SOC Approach: Automated Incident Response

Flood of Alerts Hits SOCs Cyber-attacks are on the rise and getting more complex every day. Because of COVID-19 pandemic and working remotely, security analysts experience new challenges of monitoring, detecting and responding cyber-attacks. And current incident response approach falls short. Security Operation Centers (SOCs) are overloaded with constantly increasing alerts. “The Impact of Security Alert Overload”
Friday, 22 May 2020 / Published in Incident Response

SHIELDing DFIR against CryptoLockers!

Some History It was around 7 years ago when I analyzed my first CryptoLocker which was just a prototype full of mistakes and weird stuff. My first reaction to this ‘new’ way of making money was “Well, not an art piece compared to what we have been dealing for the last three years (mostly low-level
Friday, 15 May 2020 / Published in Incident Response

IREC v2

It has been quite a long time since the last time we updated you with what’s new on Binalyze. The reason for that is it was a very busy period full of new features, updates, and even a new product! Now it is time to share the news with you. Autoruns As we all know, investigating
IR Plan
Monday, 11 May 2020 / Published in Incident Response

Incident Response Plan

Incident Response Plan is a set of actions aiming to detect and eliminate a cybersecurity breach and recover from it. Like all other Cyber Operations, it requires a systematic approach to be efficient and successful. For this purpose, every organization should have an Incident Response Plan which is the most important element of incident response