Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Splunk

Using Splunk Attack Range to Test and Detect Data Destruction (ATT&CK 1485)

Data destruction is an aggressive attack technique observed in several nation-state campaigns. This technique under MITRE ATT&CK 1485, describes actions of adversaries that may “..destroy data and files on specific systems or in large numbers on a network to interrupt availability to systems, services, and network resources. Data destruction is likely to render stored data irrecoverable by forensic techniques through overwriting files or data on local and remote drives”.

SOCtails Episode 2 - Automate your Security Operations

Kevin has the “alert fatigue”. He’s overwhelmed by too many security alerts, and he doesn’t have the resources or the time to investigate and respond to all of them. Jeff explains how automation from Splunk Phantom can help. And now, with Phantom on Splunk Mobile, you can automate security operations directly from your mobile phone.

Splunk Phantom

If you work on a security team, you probably deal with a complex security infrastructure, including a range of technologies from multiple sources, in addition to limited resources to defend your organization. Fortunately, there’s a better way. Splunk Phantom — your go-to SOAR solution — comes to the rescue by integrating your team, processes and tools so you can bring your best defense forward in no time flat.