mrmoor/cyber-threat-intelligence huggingface dataset:
This correlation allows an organization to put the pieces of the attack puzzle together to see the full picture.
Some recent RYUK ransomware attacks are a good example.
In these attacks, attackers utilized the Eternal Blue exploit and harvested credentials as they moved across the environment, and then used existing system tools to kill security services within machines to hide their presence.
In both cases the intelligence coming from endpoints, servers, and the network allowed researchers to identify the attack chain and all the components used within the attack.
Most attacks today, including ransomware, are utilizing lateral movement.
Including detection of this as part of an overall XDR platform will improve the prevention, detection, and remediation of sophisticated attacks on an organization.
Stay tuned for more upcoming blogs on how XDR will help improve our overall security strategy moving forward.
Tags  Cloud | APT & Targeted Attacks | Cyber Crime | Expert Perspective | Cyber Threats