Micro Lesson: Administering Password Policy and Service Allowlist Settings
This video explains how to administer password policy and service allowlist settings control using the Sumo Logic interface.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.
How can something called hardening be so easy?
"How can something called hardening be so easy?" with Bryan Belanger from Fervid.
Credential management best practices for business process automations
This webinar recording gives you a clear picture of the various credential-related perils that can surface because of implementing business process automation (BPA) workfows in your enterprise. Ganesh, our in-house IT security expert will walk you through the risks associated with hard-coding privileged credentials within application scripts and also provide you with a handful of security best practices to mitigate the risks and fortify your IT infrastructure from credential exposure through PAM360.
Using Policy Analyzer to develop and debug CFEngine policy
I have a setup at home where I keep a local git server running on a Raspberry Pi 3 which contains personal/work journal, dotfiles and a personal policy repository. It was set up manually so before adding a new git repository for a family password store I set about retrofiting the configuration in CFEngine. The goal in this blog is to ensure that what I have already is managed by CFEngine and that what I want to add, /srv/git/passwords.git, is created.
Automated Clean-up of HAFNIUM Shells and Processes with Splunk Phantom
If you haven’t been living under a rock for the past few weeks, you've probably come across the recent Microsoft Exchange Server vulnerabilities and its associated exploits.Stop!!! The first thing you should do is to go and patch any Exchange servers you may be running, then you can come back and finish reading this blog. Microsoft's blog provides links to various tools to help in this regard.
Automated Patch Management and Team Swarming are Key Security Practices
In the blink of an eye, you can miss a new business disrupting security incident. We all recognize that cybersecurity breaches are increasing in volume and sophistication. How we respond to them is critical. Security vulnerabilities force organizations to go outside of their daily activities to execute out-of-band responses. We face numerous challenges in managing security risk.
Detecting rare and unusual processes with Elastic machine learning
In SecOps, knowing which host processes are normally executed and which are rarely seen helps cut through the noise to quickly locate potential problems or security threats. By focusing attention on rare anomalies, security teams can be more efficient when trying to detect or hunt for potential threats. Finding a process that doesn’t often run on a server can sometimes indicate innocuous activity or could be an indication of something more alarming.
Civo Online Meetup #7 - Kubernetes security focus
Four our seventh online meetup, we discussed the critical topic of cloud-native security, focusing on Kubernetes. We looked into security of clusters, containers and code as well as explore some applications that help make sure your setups are secure. With talks from Civo Director of Evangelism Saiyam, plus Civo Ambassadors Jahred Love and Milind Chawre. Get free credit to try the world’s first K3s-powered, managed Kubernetes service.
Cloud SIEM: Modernize Security Operations and your Cyber Defense
Scott Crawford, Research Director of Information Security at 451 Research, a part of S&P Global Market Intelligence, joined by Greg Market, Vice President and General Manager of Security at Sumo Logic, discuss the increased adoption of cloud as a deployment model for SIEM. Cloud SIEM and various forms of deployment has become a significant factor for enterprises according to survey-based research at 451 Research.