Tomorrow’s job… intentionally triggering insider risk management alerts for a demo.

What we don’t do for the show… 😈

#Purview #IRM #DataExfil #AdaptiveProtection #LetsGo

Austria's Chamber of Labour was struck by 'thegentlemen' ransomware gang. How terribly polite of them to steal all that data.

#RansomwareJoy #DataExfil

~Spiderlabs~
RAVEN tool enables bulk data exfiltration and resilient persistence via rogue users, API keys, and Watcher schedules on Elasticsearch.
-
IOCs: CVE-2015-5531, RAVEN
-
#DataExfil #Elasticsearch #ThreatIntel

Our expanded partnership with the #Wiz Integrations (WIN) platform gives you a holistic view of all network activity associated with any vulnerable or exposed assets detected by Wiz.

See hostile activity targeting those assets & #lateralmovement or #dataexfil afterwards.

zurl.co/qxcpf

Our expanded partnership with the #Wiz Integrations (WIN) platform gives you a holistic view of all network activity associated with any vulnerable or exposed assets detected by Wiz.

See hostile activity targeting those assets & #lateralmovement or #dataexfil afterwards.

zurl.co/qxcpf

@paloaltonetworks.com
A global namespace flaw in AWS, GCP, and Azure allows attackers to hijack deleted cloud buckets and silently exfiltrate data streams.
-
IOCs: (None identified)
-
#CloudSecurity #DataExfil #ThreatIntel