Peer-Driven Insights

Threat Intelligence & Incident Response

About this topic

Threat intelligence and incident response refers to the collection, analysis, and use of threat data to anticipate and respond to security incidents. These practices enable timely risk mitigation and strengthen organizational resilience.

Active Ambassadors in This Topic

Rathik Pathak

JM Financial Services Ltd

Travel and Hospitality, 1k - 5k

India

View All Community Ambassadors

Community Posts

Australia's government is considering a ban on ransomware payments — do you think that could be effective? Why or why not?

Read More Comments

Where is your biggest concern when it comes to potential ransomware intrusion?

Collaboration apps (MS Teams, Zoom, Slack, etc.)53%

Social media (LinkedIn, Facebook, etc.)38%

Mobile chat (WhatsApp, WeChat, etc.)8%

View Results

Do your 2024 plans include steps to improve your cyber security incident response plan? If so, what steps are you planning to take?

Read More Comments

Would you accept software updates from a company like SolarWinds, whose tainted update infiltrated thousands of customers? How do you rebuild trust?

Read More Comments

My agency is looking for a system and operations center to prevent exfiltration of data. We have looked at Varonis and Blackfog. Any thoughts on these products or are there any suggestions of other products?

Is anyone elese having challenges with the complexity in setting up a Purview search, and how long it takes to get those results back? (I am seeing hours and days). What are you seeing and are there ways to speed this up?

How many hours per week does your company spend monitoring and mitigating fake new account fraud?

<525%

between 5-959%

Between 10-2012%

More than 203%

View Results

Has anyone ever come across a situation where a hash function didn't catch file tampering? If so, what steps did you take to address it?

Can anyone share lessons learned from MDR implementation? Is there anything you would do differently?

Can anyone share tips for using a DFIR report to inform preventative security measures? Have you been able to leverage that sort of information beyond incident response?

Read More Comments

Has anyone witnessed a SecOps manager leading incident response efforts directly? Additionally, are you observing a trend in your markets where organizations are shifting away from relying on a CISO or formalizing the CISO role, instead adapting it to meet regulatory requirements?

What Application White Listing tool are you using to meet compliance requirements and further harden your enterprise environment? Why? How long did it take to implement? What other choices did you debate procuring and why did you ultimately decide on your first choice? What gotcha did you encounter while deploying/implementing? I been looking into Airlock Digital and Applocker but wanted to get some peer recommendations and lessons learned. Thank you so much in advance!

Does Biden’s executive order on cybersecurity change your organization's approach to Zero Trust architecture? (https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/)

Read More Comments

Does Biden’s executive order provide you clarity on implementing new cybersecurity compliance frameworks at your organization?

Read More Comments

What are the biggest challenges posed by building Zero trust architecture?

Read More Comments

The developer of WASP malware claims it is undetectable — is that likely true?

Very likely4%

Likely39%

Moderately likely28%

Moderately unlikely11%

Unlikely12%

Very unlikely2%

Unsure3%

View Results