During a cyber incident every second can make a difference between a contained incident and a catastrophic breach, thus mastering the art of rapid incident response is crucial for Security Operations Centers (SOCs). A rapid response isn't just about speed; it's about smart, efficient, and effective resolutions.
Binalyze, a leading provider of cutting-edge Digital Forensics and Incident Response (DFIR) solutions, today announced it has raised a $19M Series A round of funding.
At Binalyze, one of our biggest strengths lies in our ability to listen to our customers and understand their unique needs. I’ve talked before about our obsession with understanding each customer's pain points and encouraging our team of Binalyzers to put customers at the forefront of their every consideration.
In the last 20 years, Apple’s Mac desktops and laptops have seen a significant resurgence across the enterprise network, thanks in part to the halo effect of the iPod and maintained by the ongoing dominance of the iPhone. As Mac computers have grown in popularity, those cyber adversaries responsible for creating ransomware and malware are increasingly likely to consider developing macOS variants.
We’re in the final days of 2022, and time has certainly flown by…It’s with a massive amount of pride we can look back over the past 12 months and reflect on the collective achievements we’ve made in the DFIR space throughout 2022.
There is no surprise in stating that in 2022 ransomware was the most dominant threat and so far it shows no sign of slowing down in 2023. Across the world, attackers are exploiting security weaknesses and holding companies’ data hostage, demanding tens of millions of dollars in payment.
When responding to a cybersecurity incident, spending a lot of time analyzing forensic artifacts is a luxury that none of us have. Let’s say you have an incident in an organization with thousands of servers and clients, analyzing the compromised environment will take weeks, even months.
A few days ago, I had an interesting discussion with Archan Choudhury about digital forensics practices. Archan is the Lead Cloud Security Incident Response & Digital Forensics for Informatica and also runs the popular Black Perl youtube channel.
Do you remember how much time you spent acquiring an image, taking it to your lab, processing it with powerful machines running traditional forensics solutions in order to get a timeline of events that took place?
We have released a FREE version of DRONE that scans the machine against indicators of the Print Nightmare exploit (CVE-2021-34527) and applies a workaround of stopping Spool Service so that even if the machine is unexploited now, future attempts of exploitation would be prevented until Microsoft releases a patch for this vulnerability.
3 weeks ago, one of the biggest breaches happened where FireEye uncovered a malicious campaign that gained access to victims via trojanized updates to Orion, SolarWinds’ IT monitoring and management software. Being aware of the nationwide damages this breach will produce, Binalyze released an initiative where we decided to give support to SUNBURST damaged entities
Incident Response is a set of actions aiming to detect and eliminate a cybersecurity breach and recover from it. Like all other Cyber Operations, it requires a systematic approach to be efficient and successful.
YARA is the swiss-army knife for pattern matching. It is easy to use, fast and powerful which already led to a quick adoption of it in a variety of platforms.
It was around 7 years ago when I analyzed my first CryptoLocker which was just a prototype full of mistakes and weird stuff. My first reaction to this ‘new’ way of making money was “Well, not an art piece compared to what we have been dealing for the last three years (mostly low-level kernel-mode rootkits) but it is still promising”.
FireEye has uncovered a malicious campaign that gains access to victims via trojanized updates to Orion, SolarWinds’ IT monitoring and management software.
