mtr•rapid response – PossibleThreat Articles

OODA: X-Ops Takes On Burgeoning SQL Server Attacks

July 20, 2022 0 Comments featured, managed threat response, mtr•rapid response, security operations, sophos rapid response, sophos x-ops, threat research

Credit to Author: Angela Gunn| Date: Wed, 20 Jul 2022 11:00:14 +0000

How do the pieces of Sophos X-Ops fit together? A combined effort makes tidy work of a threat actor’s big play

Security Sophos

Rapid Response: The Ngrok Incident Guide

July 14, 2022 0 Comments Incident Response, mtr•rapid response, ngrok, SophosLabs Uncut, threat research

Credit to Author: Angela Gunn| Date: Thu, 14 Jul 2022 08:01:51 +0000

Ngrok is a legitimate remote-access tool. It is regularly abused by attackers, who use its capabilities and reputation to maneuver while bypassing network protections. This incident guide shows Security Operations Centers (SOCs) and response teams how to detect and respond to the suspicious presence or use of ngrok on the network.

Security Sophos

Minimize the time to detect and respond to threats

March 9, 2022 0 Comments endpoint protection, mtr, mtr•rapid response, products & services

Credit to Author: stephenlawton| Date: Wed, 09 Mar 2022 11:00:47 +0000

Prevent, detect, respond: The three-legged stool to protecting your organization effectively