Peer-Driven Insights

Threat Intelligence & Incident Response

Active Ambassadors in This Topic

Rathik Pathak

JM Financial Services Ltd

Travel and Hospitality, 1k - 5k

View All Community Ambassadors

Community Posts

Australia's government is considering a ban on ransomware payments — do you think that could be effective? Why or why not?

Read More Comments

Any examples you can share of effective use cases for threat intelligence beyond cybersecurity? Have you had success applying threat intelligence beyond IT/cybersecurity to increase its ROI or better justify that investment?

Read More Comments

What are you working on to improve your threat hunting program (whether near- or long-term)?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?

If not - what is stopping you from setting this up?

Read More Comments

The developer of WASP malware claims it is undetectable — is that likely true?

Very likely4%

Likely39%

Moderately likely29%

Moderately unlikely8%

Unlikely12%

Very unlikely2%

Unsure3%

View Results

Which of the following vulnerability management services, if any, do you use at your organization?

HackerOne16%

Bugcrowd41%

Synack13%

Intigriti4%

We're not using a bug bounty platform right now.20%

Other (please comment below!)3%

View Results

What tools/services do you use for CTEM (continuous threat exposure management)?

Read More Comments

It's been announced that Windows 11 will be serviced on a monthly basis, similar to Windows 10's infamous "Patch Tuesdays". What's the ideal service cadence for this OS?

Updates should be released daily.13%

Updates should be released weekly56%

Updates should stay monthly.22%

Updates should be pushed quarterly.8%

Other (comment below)

View Results

Employee Count and Licensing Usage:

- What is your employee count?

- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?

- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Read More Comments

Does anyone have experience or feedback regarding use of Wazuh as a SIEM, specifically for a small (~50 person) company and with all infrastructure in the public cloud?

Read More Comments

I'd like to better understand industry standards for the number of P1 and P2 incidents for a retail company. Would any of you know where I could find these standards?

Thoughts on the recent alleged breach of Oracle Cloud’s login servers? What are your initial reactions to Oracle’s denial of the breach now that some customers have validated the leaked data?

Read More Comments

Any recommendations you can share for evaluating or implementing AI-driven network detection and response (NDR)?

Read More Comments

What processes do you rely on to address risks from rogue cloud tenants that the security team doesn’t have visibility of?

Read More Comments

How are your companies addressing Insider Threats?

What sorts of advanced threat detection tools would you recommend for monitoring multi-cloud environments?

Read More Comments