Threat Hunting with Suricata and Newly-Registered Domain Threat Intel (Open NRD) Part 3
This is a follow up to our second blog on hunting using the publicly available Newly Registered...
Network-based threat detection and response solutions from Stamus Networks
We tap into the inherent power of network traffic to uncover critical threats to your organization. We offer the best possible asset-oriented visibility and automated detection to help practitioners cut through the clutter and focus on serious and imminent threats.
By combining the best capabilities of intrusion detection systems (IDS), network security monitoring (NSM), and network detection and response (NDR), the Stamus Security Platform delivers a new generation of NDR that helps organizations know more, respond sooner, and mitigate risk.
Reduce your tool sprawl and meet your governance, risk, compliance, and operational security challenges with a single consolidated solution.
By using multiple detection technologies and guided threat hunting you'll uncover even the weakest attack signals and unauthorized activities.
Understand exactly what triggered an event with a detailed attack timeline along with all the evidence needed to respond quickly and stop a breach before damage is done.
Augment built-in detections with third party threat intel and signatures or develop your own custom detections. Easily integrate into your security tech stack.
Scales from a small stand-alone instance to multi-site, multi-100Gbps deployments integrated into your SOC/SIEM/SOAR while tracking activity of millions of hosts.
Optionally deploy our central analytics system on premise or in your datacenter, so you do not ship sensitive information to a SaaS-based system. And SSP may even be deployed in a completely air-gapped environment.
Supercharge your existing Suricata deployment! Start with your Suricata sensors, while you transition to the more advanced Stamus Network Probes.
Stamus Networks' product development is led by our co-founders, Éric Leblond and Peter Manev.
Both Éric and Peter are members of the Open Information Security Foundation executive team and developers on the Suricata project, the widely-deployed open source intrusion detection and network security monitoring engine. The OISF is a non-profit organization created to build community and to support open source security technologies like Suricata.
Stamus Networks applies its extensive Suricata and network expertise to develop our advanced network security solutions - both commercial and opensource.
Cozy Bear — also known as APT29, CozyCar, CozyDuke, and others — is a familiar name to security...
