Peer-Driven Insights

Threat Intelligence & Incident Response

Active Ambassadors in This Topic

JM Financial Services Ltd

Travel and Hospitality, 1k - 5k

Community Posts

Yes, this will discourage attacks.76%

No, as the victim's customers are also impacted by ransomware attacks.23%

Yes; I had to take extended time off to recover18%

Yes; but I kept working anyway56%

Almost; I was able to catch it early and made changes17%

No; I have not experienced extreme stress or burnout8%

View Results

Don't know3%

View Results

Active Ambassadors in This Topic

Rathik Pathak

Community Posts

What tools/services do you use for CTEM (continuous threat exposure management)?

With Gartner highlighting the urgency of post-quantum cryptography (PQC), I would like to know if there are other members of the group already involved in the discussion or in the planning to face the threat of attacks like 'harvest-now, decrypt-later'?

How are your companies addressing Insider Threats?

What’s your organization doing to protect against risks related to disinformation? How are you approaching this & which business unit leaders are currently involved?

Any examples you can share of effective use cases for threat intelligence beyond cybersecurity? Have you had success applying threat intelligence beyond IT/cybersecurity to increase its ROI or better justify that investment?

What are you working on to improve your threat hunting program (whether near- or long-term)?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?If not - what is stopping you from setting this up?

Employee Count and Licensing Usage:- What is your employee count?- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Does anyone have experience or feedback regarding use of Wazuh as a SIEM, specifically for a small (~50 person) company and with all infrastructure in the public cloud?

I'd like to better understand industry standards for the number of P1 and P2 incidents for a retail company. Would any of you know where I could find these standards?

Can a ban on ransom payments stop ransomware attacks?

Have you experienced extreme stress or burnout while working in cybersecurity?

Thoughts on the recent alleged breach of Oracle Cloud’s login servers? What are your initial reactions to Oracle’s denial of the breach now that some customers have validated the leaked data?

Mike Sievert, chief executive of T-Mobile US Inc. apologized to customers for a security breach that has exposed personal data from more than 50 million people. Should this be standard practice for breaches across the industry?

Any recommendations you can share for evaluating or implementing AI-driven network detection and response (NDR)?

What processes do you rely on to address risks from rogue cloud tenants that the security team doesn’t have visibility of?

Community Posts

What tools/services do you use for CTEM (continuous threat exposure management)?

With Gartner highlighting the urgency of post-quantum cryptography (PQC), I would like to know if there are other members of the group already involved in the discussion or in the planning to face the threat of attacks like 'harvest-now, decrypt-later'?

How are your companies addressing Insider Threats?

What’s your organization doing to protect against risks related to disinformation? How are you approaching this & which business unit leaders are currently involved?

Any examples you can share of effective use cases for threat intelligence beyond cybersecurity? Have you had success applying threat intelligence beyond IT/cybersecurity to increase its ROI or better justify that investment?

What are you working on to improve your threat hunting program (whether near- or long-term)?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?If not - what is stopping you from setting this up?

Employee Count and Licensing Usage:- What is your employee count?- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Does anyone have experience or feedback regarding use of Wazuh as a SIEM, specifically for a small (~50 person) company and with all infrastructure in the public cloud?

I'd like to better understand industry standards for the number of P1 and P2 incidents for a retail company. Would any of you know where I could find these standards?

Can a ban on ransom payments stop ransomware attacks?

Have you experienced extreme stress or burnout while working in cybersecurity?

Thoughts on the recent alleged breach of Oracle Cloud’s login servers? What are your initial reactions to Oracle’s denial of the breach now that some customers have validated the leaked data?

Mike Sievert, chief executive of T-Mobile US Inc. apologized to customers for a security breach that has exposed personal data from more than 50 million people. Should this be standard practice for breaches across the industry?

Any recommendations you can share for evaluating or implementing AI-driven network detection and response (NDR)?

What processes do you rely on to address risks from rogue cloud tenants that the security team doesn’t have visibility of?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?

If not - what is stopping you from setting this up?

Employee Count and Licensing Usage:

- What is your employee count?

- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?

- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?

If not - what is stopping you from setting this up?

Employee Count and Licensing Usage:

- What is your employee count?

- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?

- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?