dwell time – PossibleThreat Articles

Security Sophos

The Song Remains the Same: The 2023 Active Adversary Report for Security Practitioners

November 14, 2023 0 Comments active adversary report, dwell time, featured, Incident Response, lolbins, mdr, practitioners, threat research, tools

Credit to Author: Angela Gunn| Date: Tue, 14 Nov 2023 11:00:10 +0000

The remarkable decline in attacker dwell time is now well-documented, but what does that mean for those doing the hands-on work of infosecurity?

Security Sophos

Time keeps on slippin’ slippin’ slippin’: The 2023 Active Adversary Report for Tech Leaders

August 23, 2023 0 Comments active adversary report, active directory, attribution, detection, dwell time, featured, Incident Response, MFA, mtr, RDP, sophos x-ops, threat research

Credit to Author: Angela Gunn| Date: Wed, 23 Aug 2023 10:01:02 +0000

A deep dive into incident-response cases from the first half of this year finds both attackers and defenders picking up the pace

Security Sophos

The Active Adversary Playbook 2022

June 7, 2022 0 Comments active adversary, artifacts, attack tools, cobalt strike, Cryptomining, cyberattacks, cyberthreats, dwell time, Exploit, featured, initial access broker, malware delivery system, mitre, proxylogon, proxyshell, Ransomware, Ransomware as a Service, security operations, sophos rapid response, vulnerability

Credit to Author: Tilly Travers| Date: Tue, 07 Jun 2022 11:02:43 +0000

Cyberattacker behaviors, tactics and tools seen on the frontline of incident response during 2021