Peer-Driven Insights

Threat Intelligence & Incident Response

Active Ambassadors in This Topic

JM Financial Services Ltd

Travel and Hospitality, 1k - 5k

Community Posts

Yes, I personally have fallen victim.10%

Yes, my company has fallen victim.54%

No, but this is a real concern for me.32%

No, and I'm not concerned.3%

View Results

Building an effective incident response plan31%

Educating and training employees on cybersecurity60%

Enforcing password and access management50%

Protecting endpoint devices40%

Integrating security solutions24%

Embracing the cloud9%

View Results

View Results

Active Ambassadors in This Topic

Rathik Pathak

Community Posts

Australia's government is considering a ban on ransomware payments — do you think that could be effective? Why or why not?

What tools/services do you use for CTEM (continuous threat exposure management)?

With Gartner highlighting the urgency of post-quantum cryptography (PQC), I would like to know if there are other members of the group already involved in the discussion or in the planning to face the threat of attacks like 'harvest-now, decrypt-later'?

How are your companies addressing Insider Threats?

What’s your organization doing to protect against risks related to disinformation? How are you approaching this & which business unit leaders are currently involved?

Any examples you can share of effective use cases for threat intelligence beyond cybersecurity? Have you had success applying threat intelligence beyond IT/cybersecurity to increase its ROI or better justify that investment?

Have you ever been the victim of a ransomware attack?

What are you working on to improve your threat hunting program (whether near- or long-term)?

What area(s) do you think your organization should improve to strengthen its cybersecurity posture?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?If not - what is stopping you from setting this up?

Employee Count and Licensing Usage:- What is your employee count?- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Does anyone have experience or feedback regarding use of Wazuh as a SIEM, specifically for a small (~50 person) company and with all infrastructure in the public cloud?

I'd like to better understand industry standards for the number of P1 and P2 incidents for a retail company. Would any of you know where I could find these standards?

Poly Network has offered a job to a hacker who stole $600M in cryptocurrencies from them earlier this month but has since been cooperating with their team. Would you have done the same?

Thoughts on the recent alleged breach of Oracle Cloud’s login servers? What are your initial reactions to Oracle’s denial of the breach now that some customers have validated the leaked data?

Any recommendations you can share for evaluating or implementing AI-driven network detection and response (NDR)?

Community Posts

Australia's government is considering a ban on ransomware payments — do you think that could be effective? Why or why not?

What tools/services do you use for CTEM (continuous threat exposure management)?

With Gartner highlighting the urgency of post-quantum cryptography (PQC), I would like to know if there are other members of the group already involved in the discussion or in the planning to face the threat of attacks like 'harvest-now, decrypt-later'?

How are your companies addressing Insider Threats?

What’s your organization doing to protect against risks related to disinformation? How are you approaching this & which business unit leaders are currently involved?

Any examples you can share of effective use cases for threat intelligence beyond cybersecurity? Have you had success applying threat intelligence beyond IT/cybersecurity to increase its ROI or better justify that investment?

Have you ever been the victim of a ransomware attack?

What are you working on to improve your threat hunting program (whether near- or long-term)?

What area(s) do you think your organization should improve to strengthen its cybersecurity posture?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?If not - what is stopping you from setting this up?

Employee Count and Licensing Usage:- What is your employee count?- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Does anyone have experience or feedback regarding use of Wazuh as a SIEM, specifically for a small (~50 person) company and with all infrastructure in the public cloud?

I'd like to better understand industry standards for the number of P1 and P2 incidents for a retail company. Would any of you know where I could find these standards?

Poly Network has offered a job to a hacker who stole $600M in cryptocurrencies from them earlier this month but has since been cooperating with their team. Would you have done the same?

Thoughts on the recent alleged breach of Oracle Cloud’s login servers? What are your initial reactions to Oracle’s denial of the breach now that some customers have validated the leaked data?

Any recommendations you can share for evaluating or implementing AI-driven network detection and response (NDR)?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?

If not - what is stopping you from setting this up?

Employee Count and Licensing Usage:

- What is your employee count?

- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?

- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?

If not - what is stopping you from setting this up?

Employee Count and Licensing Usage:

- What is your employee count?

- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?

- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?