---
title: Stamus-Networks-Blog | Threat intelligence
description: Threat intelligence | Follow our blog as we share our experiences, insights, perspectives and open-source experiments.
---

[![Stamus Networks Logo](https://www.stamus-networks.com/hubfs/stamus_logo_blue_cropped-2.png "Stamus Networks Logo")](https://stamus-networks-6344338-hs-sites-com.sandbox.hs-sites.com/?hsLang=en)

![Stamus_Pattern_16x9](https://www.stamus-networks.com/hubfs/Backgrounds/Stamus_Pattern_16x9.png "Stamus_Pattern_16x9")

# Stamus Networks Blog

## We believe that sharing information is necessary to improve global security. The purpose of this blog is to share our experiences, perspectives and experiments.

### Subscribe to our Blog

[Blog](https://www.stamus-networks.com/blog) /

Showing 26 results  
of 26 items. 

Reset All

### Category

- Suricata
- Network Detection and Response
- Stamus Security Platform
- Open Source
- Stamus Labs
- Back to Basics
- Threat Hunting
- SELKS
- ClearNDR
- Clear NDR Enterprise
- IDS-IPS
- Events
- Network Security Monitoring
- Threat intelligence
- Declarations of Compromise
- Clear NDR Community
- Industry Perspective
- Stamus News
- Artificial Intelligence
- Uncovered with SSP
- Unique to Clear NDR
- Transparency
- Threats! What Threats?
- Endpoint Detection
- Core Principles
- Compliance
- Kibana
- CVE
- Phishing
- Cloud Security
- SANS
- uncovered with Clear NDR
- Jupyter Notebook
- Splunk
- XDR
- Declarations of Policy Violations
- GopherCap
- Model Context Protocol (MCP)
- NATO CCDCOE
- Scirius Security Platform
- Beaconing
- MCP
- Zero Trust
- feature spotlight

### Recent Posts

### Posts by Categories

- [Suricata (105)](https://www.stamus-networks.com/blog/tag/suricata)
- [Network Detection and Response (104)](https://www.stamus-networks.com/blog/tag/network-detection-and-response)
- [Stamus Security Platform (103)](https://www.stamus-networks.com/blog/tag/stamus-security-platform)
- [Open Source (100)](https://www.stamus-networks.com/blog/tag/open-source)
- [Stamus Labs (70)](https://www.stamus-networks.com/blog/tag/stamus-labs)
- [Back to Basics (66)](https://www.stamus-networks.com/blog/tag/back-to-basics)
- [Threat Hunting (63)](https://www.stamus-networks.com/blog/tag/threat-hunting)
- [SELKS (57)](https://www.stamus-networks.com/blog/tag/selks)
- [ClearNDR (50)](https://www.stamus-networks.com/blog/tag/clearndr)
- [Clear NDR Enterprise (42)](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)
- [IDS-IPS (42)](https://www.stamus-networks.com/blog/tag/ids-ips)
- [Events (32)](https://www.stamus-networks.com/blog/tag/events)
- [Network Security Monitoring (32)](https://www.stamus-networks.com/blog/tag/network-security-monitoring)
- [Threat intelligence (26)](https://www.stamus-networks.com/blog/tag/threat-intelligence)
- [Declarations of Compromise (23)](https://www.stamus-networks.com/blog/tag/declarations-of-compromise)
- [Clear NDR Community (21)](https://www.stamus-networks.com/blog/tag/clear-ndr-community)
- [Industry Perspective (21)](https://www.stamus-networks.com/blog/tag/industry-perspective)
- [Stamus News (19)](https://www.stamus-networks.com/blog/tag/stamus-news)
- [Artificial Intelligence (15)](https://www.stamus-networks.com/blog/tag/artificial-intelligence)
- [Uncovered with SSP (14)](https://www.stamus-networks.com/blog/tag/uncovered-with-ssp)
- [Unique to Clear NDR (13)](https://www.stamus-networks.com/blog/tag/unique-to-clear-ndr)
- [Transparency (12)](https://www.stamus-networks.com/blog/tag/transparency)
- [Threats! What Threats? (11)](https://www.stamus-networks.com/blog/tag/threats-what-threats)
- [Endpoint Detection (10)](https://www.stamus-networks.com/blog/tag/endpoint-detection)
- [Core Principles (9)](https://www.stamus-networks.com/blog/tag/core-principles)
- [Compliance (7)](https://www.stamus-networks.com/blog/tag/compliance)
- [Kibana (7)](https://www.stamus-networks.com/blog/tag/kibana)
- [CVE (6)](https://www.stamus-networks.com/blog/tag/cve)
- [Phishing (6)](https://www.stamus-networks.com/blog/tag/phishing)
- [Cloud Security (5)](https://www.stamus-networks.com/blog/tag/cloud-security)
- [SANS (5)](https://www.stamus-networks.com/blog/tag/sans)
- [uncovered with Clear NDR (5)](https://www.stamus-networks.com/blog/tag/uncovered-with-clear-ndr)
- [Jupyter Notebook (4)](https://www.stamus-networks.com/blog/tag/jupyter-notebook)
- [Splunk (4)](https://www.stamus-networks.com/blog/tag/splunk)
- [XDR (4)](https://www.stamus-networks.com/blog/tag/xdr)
- [Declarations of Policy Violations (3)](https://www.stamus-networks.com/blog/tag/declarations-of-policy-violations)
- [GopherCap (3)](https://www.stamus-networks.com/blog/tag/gophercap)
- [Model Context Protocol (MCP) (2)](https://www.stamus-networks.com/blog/tag/model-context-protocol-mcp)
- [NATO CCDCOE (2)](https://www.stamus-networks.com/blog/tag/nato-ccdcoe)
- [Scirius Security Platform (2)](https://www.stamus-networks.com/blog/tag/scirius-security-platform)
- [Beaconing (1)](https://www.stamus-networks.com/blog/tag/beaconing)
- [MCP (1)](https://www.stamus-networks.com/blog/tag/mcp)
- [Zero Trust (1)](https://www.stamus-networks.com/blog/tag/zero-trust)
- [feature spotlight (1)](https://www.stamus-networks.com/blog/tag/feature-spotlight)

[See all](https://www.stamus-networks.com/blog/tag/threat-intelligence#)

[![Suricata Language Server 1.3.0: Automated PCAP Testing, Multi-Version Support, and Syntax Highlighting](https://www.stamus-networks.com/hubfs/SLS-1.3-18-Dec-2025.jpg) ](https://www.stamus-networks.com/blog/suricata-language-server-1.3-automated-pcap-testing-and-multi-version-support)

## [Suricata Language Server 1.3.0: Automated PCAP Testing, Multi-Version Support, and Syntax Highlighting](https://www.stamus-networks.com/blog/suricata-language-server-1.3-automated-pcap-testing-and-multi-version-support)

** Dec 18, 2025 **Eric Leblond

** [Open Source](https://www.stamus-networks.com/blog/tag/open-source), [Suricata](https://www.stamus-networks.com/blog/tag/suricata), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [ClearNDR](https://www.stamus-networks.com/blog/tag/clearndr), [Clear NDR Community](https://www.stamus-networks.com/blog/tag/clear-ndr-community), [Clear NDR Enterprise](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)

[Suricata Language Server](https://www.stamus-networks.com/suricata-language-server?hsLang=en) 1.3.0 is now available and it surfs on the concept of magic comment...

[Read More](https://www.stamus-networks.com/blog/suricata-language-server-1.3-automated-pcap-testing-and-multi-version-support)

[![Detecting Fake CrowdStrike Domains Communications using Stamus Security Platform (SSP)](https://www.stamus-networks.com/hubfs/Stamus-2024-Crowdstrike-Incident-Graphic-1.jpg) ](https://www.stamus-networks.com/blog/detecting-fake-crowdstrike-domains-using-stamus-security-platform)

## [Detecting Fake CrowdStrike Domains using Stamus Security Platform](https://www.stamus-networks.com/blog/detecting-fake-crowdstrike-domains-using-stamus-security-platform)

** Jul 22, 2024 **Stamus Networks Team

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Endpoint Detection](https://www.stamus-networks.com/blog/tag/endpoint-detection), [Network Security Monitoring](https://www.stamus-networks.com/blog/tag/network-security-monitoring), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence)

The [recent global outage](https://www.cnn.com/business/live-news/global-outage-intl-hnk/index.html) caused by an [update to CrowdStrike Falcon](https://www.crowdstrike.com/blog/statement-on-windows-sensor-update/), CrowdStrike's endpoint...

[Read More](https://www.stamus-networks.com/blog/detecting-fake-crowdstrike-domains-using-stamus-security-platform)

[![The Hidden Claws of APT 35: Charming Kitten by Dallon Robinette](https://www.stamus-networks.com/hubfs/Stamus-2024-APT35-Featured-B.jpg) ](https://www.stamus-networks.com/blog/the-hidden-claws-of-apt-35-charming-kitten)

## [The Hidden Claws of APT 35: Charming Kitten](https://www.stamus-networks.com/blog/the-hidden-claws-of-apt-35-charming-kitten)

** May 09, 2024 **Dallon Robinette

** [Stamus Labs](https://www.stamus-networks.com/blog/tag/stamus-labs), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence)

Don’t let the disarming name fool you.[Charming Kitten](https://malpedia.caad.fkie.fraunhofer.de/actor/charming_kitten), also known as APT 35, Newscaster Team, Ajax...

[Read More](https://www.stamus-networks.com/blog/the-hidden-claws-of-apt-35-charming-kitten)

[![Behind the Curtain: Understanding Cozy Bear (APT29)](https://www.stamus-networks.com/hubfs/Stamus-Cozy-Bear.jpg) ](https://www.stamus-networks.com/blog/cozy-bear-apt29)

## [Behind the Curtain: Understanding Cozy Bear (APT29)](https://www.stamus-networks.com/blog/cozy-bear-apt29)

** Nov 07, 2023 **Dallon Robinette

** [Stamus Labs](https://www.stamus-networks.com/blog/tag/stamus-labs), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence)

Cozy Bear — also known as APT29, CozyCar, CozyDuke, and others — is a familiar name to security...

[Read More](https://www.stamus-networks.com/blog/cozy-bear-apt29)

[![Open NRD: Newly Registered Domain Threat Intel Feeds for Suricata by Peter Manev](https://www.stamus-networks.com/hubfs/Stamus-Open-NRD-Threat-Intel.jpg) ](https://www.stamus-networks.com/blog/introducing-open-nrd)

## [Introducing Open NRD: Newly Registered Domain Threat Intel Feeds for Suricata](https://www.stamus-networks.com/blog/introducing-open-nrd)

** Oct 17, 2023 **Peter Manev

** [SELKS](https://www.stamus-networks.com/blog/tag/selks), [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Suricata](https://www.stamus-networks.com/blog/tag/suricata), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Stamus News](https://www.stamus-networks.com/blog/tag/stamus-news), [ClearNDR](https://www.stamus-networks.com/blog/tag/clearndr)

This article describes the details of the new Open NRD threat intelligence feeds provided by Stamus...

[Read More](https://www.stamus-networks.com/blog/introducing-open-nrd)

[![Behind the Curtain: Understanding Fancy Bear (APT 28)](https://www.stamus-networks.com/hubfs/Stamus-Fancy-Bear.jpg) ](https://www.stamus-networks.com/blog/behind-the-curtain-understanding-fancy-bear-apt-28)

## [Behind the Curtain: Understanding Fancy Bear (APT 28)](https://www.stamus-networks.com/blog/behind-the-curtain-understanding-fancy-bear-apt-28)

** Sep 28, 2023 **Dallon Robinette

** [Stamus Labs](https://www.stamus-networks.com/blog/tag/stamus-labs), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence)

Operating since 2008, the shadowy figure of Fancy Bear has emerged as a formidable force in the...

[Read More](https://www.stamus-networks.com/blog/behind-the-curtain-understanding-fancy-bear-apt-28)

[![Threat Hunting for Unknown Actors & Threats using NRD and Sightings](https://www.stamus-networks.com/hubfs/Stamus-Threat-Hunt-NRD.jpg) ](https://www.stamus-networks.com/blog/threat-hunting-for-unknown-actors-threats-using-nrd-and-sightings)

## [Threat Hunting for Unknown Actors & Threats using NRD and Sightings](https://www.stamus-networks.com/blog/threat-hunting-for-unknown-actors-threats-using-nrd-and-sightings)

** Aug 03, 2023 **Peter Manev

** [Threat Hunting](https://www.stamus-networks.com/blog/tag/threat-hunting), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [ClearNDR](https://www.stamus-networks.com/blog/tag/clearndr)

This week’s guided threat hunting blog focuses on hunting for high-entropy NRD (newly registered...

[Read More](https://www.stamus-networks.com/blog/threat-hunting-for-unknown-actors-threats-using-nrd-and-sightings)

[![Incorporating Newley-Registered Domains into Stamus Security Platform Workflow by Peter Manev](https://www.stamus-networks.com/hubfs/image13.jpeg) ](https://www.stamus-networks.com/blog/incorporating-newly-registered-domains-into-stamus-security-platform-workflow)

## [Incorporating Newly Registered Domains (Open NRD) into Stamus Security Platform Workflow](https://www.stamus-networks.com/blog/incorporating-newly-registered-domains-into-stamus-security-platform-workflow)

** Aug 01, 2023 **Peter Manev

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Threat Hunting](https://www.stamus-networks.com/blog/tag/threat-hunting), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence)

Every day, new Internet domains are registered through the Domain Name System (DNS) as a natural...

[Read More](https://www.stamus-networks.com/blog/incorporating-newly-registered-domains-into-stamus-security-platform-workflow)

[![Using MISP Shared Intelligence with SELKS by Alexander Nedelchev](https://www.stamus-networks.com/hubfs/Stamus-using-MISP-with-SELKS.jpg) ](https://www.stamus-networks.com/blog/using-misp-shared-intelligence-with-selks)

## [Using MISP Shared Intelligence with SELKS](https://www.stamus-networks.com/blog/using-misp-shared-intelligence-with-selks)

** Mar 21, 2023 **Alexander Nedelchev

** [SELKS](https://www.stamus-networks.com/blog/tag/selks), [Open Source](https://www.stamus-networks.com/blog/tag/open-source), [Suricata](https://www.stamus-networks.com/blog/tag/suricata), [Stamus Labs](https://www.stamus-networks.com/blog/tag/stamus-labs), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence)

A couple of weeks ago, we covered how [Stamus Security Platform (SSP)](https://www.stamus-networks.com/stamus-security-platform?hsLang=en) users can [harness the power of...](https://www.stamus-networks.com/blog/using-misp-shared-intelligence-in-stamus-security-platform)

[Read More](https://www.stamus-networks.com/blog/using-misp-shared-intelligence-with-selks)

[![Using MISP Shared Threat Intelligence in Stamus Security Platform](https://www.stamus-networks.com/hubfs/Stamus-using-MISP-with-SSP.jpg) ](https://www.stamus-networks.com/blog/using-misp-shared-intelligence-in-stamus-security-platform)

## [Using MISP Shared Intelligence in Clear NDR](https://www.stamus-networks.com/blog/using-misp-shared-intelligence-in-stamus-security-platform)

** Mar 09, 2023 **Alexander Nedelchev

** [Open Source](https://www.stamus-networks.com/blog/tag/open-source), [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Stamus Labs](https://www.stamus-networks.com/blog/tag/stamus-labs), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Clear NDR Enterprise](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)

[Clear NDRTM ](https://www.stamus-networks.com/clear-ndr?hsLang=en)users can now integrate the [Malware Information Sharing Platform (MISP)](https://www.misp-project.org/) to supplement...

[Read More](https://www.stamus-networks.com/blog/using-misp-shared-intelligence-in-stamus-security-platform)

[![Stop the leak! Detecting ChatGPT used as a channel for data exfiltration by Peter Manev](https://www.stamus-networks.com/hubfs/Stamus-Data-Leak-via-ChatGPT.jpg) ](https://www.stamus-networks.com/blog/stop-the-leak-detecting-chatgpt-used-as-a-channel-for-data-exfiltration)

## [Stop the leak! Detecting ChatGPT used as a channel for data exfiltration](https://www.stamus-networks.com/blog/stop-the-leak-detecting-chatgpt-used-as-a-channel-for-data-exfiltration)

** Feb 28, 2023 **Peter Manev

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Clear NDR Enterprise](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)

In a recent conversation, one of our customers shared their concerns about the use of ChatGPT in...

[Read More](https://www.stamus-networks.com/blog/stop-the-leak-detecting-chatgpt-used-as-a-channel-for-data-exfiltration)

[![An Introduction to Cyber Threat Intelligence by Stamus Networks Team](https://www.stamus-networks.com/hubfs/Stamus-Intro-to-Cyber-Threat-Intelligence2.jpg) ](https://www.stamus-networks.com/blog/an-introduction-to-cyber-threat-intelligence)

## [An Introduction to Cyber Threat Intelligence](https://www.stamus-networks.com/blog/an-introduction-to-cyber-threat-intelligence)

** Feb 09, 2023 **Stamus Networks Team

** [Stamus Labs](https://www.stamus-networks.com/blog/tag/stamus-labs), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence)

Because cybersecurity teams face numerous threats from bad actors that are continually devising new...

[Read More](https://www.stamus-networks.com/blog/an-introduction-to-cyber-threat-intelligence)

[![Harness the Power of Shared Threat Intelligence with MISP by Alexander Nedelchev](https://www.stamus-networks.com/hubfs/Stamus-Harness-Shared-Threat-Intel-with-MISP.jpg) ](https://www.stamus-networks.com/blog/harness-the-power-of-shared-threat-intelligence-with-misp)

## [Harness the Power of Shared Threat Intelligence with MISP](https://www.stamus-networks.com/blog/harness-the-power-of-shared-threat-intelligence-with-misp)

** Feb 03, 2023 **Alexander Nedelchev

** [Open Source](https://www.stamus-networks.com/blog/tag/open-source), [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [IDS-IPS](https://www.stamus-networks.com/blog/tag/ids-ips), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence)

When it comes to cyber threats, we understand that a threat to one organization can quickly become...

[Read More](https://www.stamus-networks.com/blog/harness-the-power-of-shared-threat-intelligence-with-misp)

[![NEW! Open Ruleset for Detecting Lateral Movement with Suricata](https://www.stamus-networks.com/hubfs/Lateral%20Movement%20Ruleset.jpg) ](https://www.stamus-networks.com/blog/new-open-ruleset-for-detecting-lateral-movement-with-suricata)

## [NEW! Open Ruleset for Detecting Lateral Movement in Windows Environments with Suricata](https://www.stamus-networks.com/blog/new-open-ruleset-for-detecting-lateral-movement-with-suricata)

** Nov 10, 2022 **Peter Manev

** [Open Source](https://www.stamus-networks.com/blog/tag/open-source), [Suricata](https://www.stamus-networks.com/blog/tag/suricata), [Stamus Labs](https://www.stamus-networks.com/blog/tag/stamus-labs), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence)

Today, we’re announcing a new open-source contribution from Stamus Networks - a [Suricata](https://www.stamus-networks.com/simplifying-suricata?hsLang=en) ruleset...

[Read More](https://www.stamus-networks.com/blog/new-open-ruleset-for-detecting-lateral-movement-with-suricata)

[![](https://www.stamus-networks.com/hubfs/ScratchPad-BlogImages-General.pptx.jpg) ](https://www.stamus-networks.com/blog/threats-what-threats-penetration-tests-and-stamus-security-platform)

## [Threats! What Threats? Penetration Tests and Clear NDR](https://www.stamus-networks.com/blog/threats-what-threats-penetration-tests-and-stamus-security-platform)

** Sep 22, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats), [Clear NDR Enterprise](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)

This week in our threat detection blog we are mixing things up and discussing an important  [Clear...](https://www.stamus-networks.com/clear-ndr?hsLang=en)

[Read More](https://www.stamus-networks.com/blog/threats-what-threats-penetration-tests-and-stamus-security-platform)

[![](https://www.stamus-networks.com/hubfs/Remote%20Access%20Trojans.jpg) ](https://www.stamus-networks.com/blog/threats-what-threats-combatting-remote-access-trojans-with-stamus-security-platform)

## [Threats! What Threats? Combatting Remote Access Trojans with Clear NDR](https://www.stamus-networks.com/blog/threats-what-threats-combatting-remote-access-trojans-with-stamus-security-platform)

** Sep 12, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats), [Clear NDR Enterprise](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)

This week’s threat detection blog dives deeper into a common type of malware, remote access trojans...

[Read More](https://www.stamus-networks.com/blog/threats-what-threats-combatting-remote-access-trojans-with-stamus-security-platform)

[![Threats! What Threats? Combatting Crypto Mining and Stamus Security Platform](https://www.stamus-networks.com/hubfs/SSP-and-CryptoMining%20%281%29.jpg) ](https://www.stamus-networks.com/blog/threats-what-threats-1)

## [Threats! What Threats? Combatting Crypto Mining and Stamus Security Platform](https://www.stamus-networks.com/blog/threats-what-threats-1)

** Sep 01, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats)

In this week’s threat detection blog, we will be reviewing a financially-motivated threat that is...

[Read More](https://www.stamus-networks.com/blog/threats-what-threats-1)

[![Uncovering Shadow IT with Stamus Security Platform](https://www.stamus-networks.com/hubfs/Dallon_Blog_Images/Threats%20What%20Threats/SSP-and-ShadowIT.jpg) ](https://www.stamus-networks.com/blog/threats-what-threats-uncovering-shadow-it-with-stamus-security-platform)

## [Threats! What Threats? Uncovering Shadow IT with Stamus Security Platform](https://www.stamus-networks.com/blog/threats-what-threats-uncovering-shadow-it-with-stamus-security-platform)

** Aug 25, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats)

This week we are taking a closer look at Shadow IT, which is the use of information technology by...

[Read More](https://www.stamus-networks.com/blog/threats-what-threats-uncovering-shadow-it-with-stamus-security-platform)

[![](https://www.stamus-networks.com/hubfs/ScratchPad-BlogImages-General.pptx%20(1).jpg) ](https://www.stamus-networks.com/blog/threats-what-threats-detecting-phishing-with-stamus-security-platform)

## [Threats! What Threats? Detecting Phishing with Clear NDR](https://www.stamus-networks.com/blog/threats-what-threats-detecting-phishing-with-stamus-security-platform)

** Aug 05, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats), [Clear NDR Enterprise](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)

Phishing is commonly regarded as the most common and effective way attackers can gain access into a...

[Read More](https://www.stamus-networks.com/blog/threats-what-threats-detecting-phishing-with-stamus-security-platform)

[![](https://www.stamus-networks.com/hubfs/Command%20and%20Control.jpg) ](https://www.stamus-networks.com/blog/threats-what-threats-command-control-and-stamus-security-platform)

## [Threats! What Threats? Command & Control and Clear NDR](https://www.stamus-networks.com/blog/threats-what-threats-command-control-and-stamus-security-platform)

** Jul 29, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats), [Clear NDR Enterprise](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)

In this article, we will review one of the most important and critical  phases on the [cyber kill...](https://en.wikipedia.org/wiki/Kill_chain)

[Read More](https://www.stamus-networks.com/blog/threats-what-threats-command-control-and-stamus-security-platform)

[![](https://www.stamus-networks.com/hubfs/Malware%20Beacons.jpg) ](https://www.stamus-networks.com/blog/threats-what-threats-malware-beacons-and-stamus-security-platform)

## [Threats! What Threats? Malware Beacons and Clear NDR](https://www.stamus-networks.com/blog/threats-what-threats-malware-beacons-and-stamus-security-platform)

** Jul 21, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats), [Clear NDR Enterprise](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)

One of the first network-related indications of a botnet or peer-to-peer (P2P) malware infection is...

[Read More](https://www.stamus-networks.com/blog/threats-what-threats-malware-beacons-and-stamus-security-platform)

[![](https://www.stamus-networks.com/hubfs/Lateral%20Movement.jpg) ](https://www.stamus-networks.com/blog/threats-what-threats-detecting-lateral-movement-with-stamus-security-platform)

## [Threats! What Threats? Detecting Lateral Movement with Clear NDR](https://www.stamus-networks.com/blog/threats-what-threats-detecting-lateral-movement-with-stamus-security-platform)

** Jul 14, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats), [Clear NDR Enterprise](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)

In this article I want to highlight one of the tactics used by malicious actors to move within your...

[Read More](https://www.stamus-networks.com/blog/threats-what-threats-detecting-lateral-movement-with-stamus-security-platform)

[![](https://www.stamus-networks.com/hubfs/Malware.jpg) ](https://www.stamus-networks.com/blog/ssp-and-malware)

## [Threats! What Threats? Combatting Malware with Clear NDR](https://www.stamus-networks.com/blog/ssp-and-malware)

** Jun 30, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats), [Clear NDR Enterprise](https://www.stamus-networks.com/blog/tag/clear-ndr-enterprise)

In the first article of this series -- [*Threats! What Threats?*](https://docs.google.com/document/d/15ridIEJ9agrygPVwpVAzH07rzS18xXtjAsppMaZgSkQ/edit?usp=sharing) -- I mentioned that my colleague,...

[Read More](https://www.stamus-networks.com/blog/ssp-and-malware)

[![Embrace Open Interfaces and Open Source](https://www.stamus-networks.com/hubfs/Dallon_Blog_Images/Core_Principals_Blogs_2022-05-10/StamusCorePrinciple_EmbraceOpen.jpg) ](https://www.stamus-networks.com/blog/embrace-open-interfaces-and-open-source)

## [Embrace Open Interfaces and Open Source](https://www.stamus-networks.com/blog/embrace-open-interfaces-and-open-source)

** Jun 09, 2022 **Ken Gramley

** [Open Source](https://www.stamus-networks.com/blog/tag/open-source), [Suricata](https://www.stamus-networks.com/blog/tag/suricata), [Core Principles](https://www.stamus-networks.com/blog/tag/core-principles), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence)

When the leadership team at Stamus Networks got together to capture the core principles of our...

[Read More](https://www.stamus-networks.com/blog/embrace-open-interfaces-and-open-source)

[![Combatting Ransomware with Stamus Security Platform](https://www.stamus-networks.com/hubfs/SSP-and-Combatting-Ransomware.jpg) ](https://www.stamus-networks.com/blog/ssp-and-ransomware)

## [Threats! What Threats? | Combatting Ransomware with Stamus Security Platform](https://www.stamus-networks.com/blog/ssp-and-ransomware)

** Mar 10, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats)

In the first article of this series –*[Threats! What Threats?](https://www.stamus-networks.com/blog/threats-what-threats) –* I mentioned that my colleague, Steve...

[Read More](https://www.stamus-networks.com/blog/ssp-and-ransomware)

[![Stamus Networks: Threats! What Threats?](https://www.stamus-networks.com/hubfs/StamusBlog-Threats-What-Threats.jpg) ](https://www.stamus-networks.com/blog/threats-what-threats)

## [Threats! What Threats?](https://www.stamus-networks.com/blog/threats-what-threats)

** Feb 24, 2022 **D. Mark Durrett

** [Network Detection and Response](https://www.stamus-networks.com/blog/tag/network-detection-and-response), [Stamus Security Platform](https://www.stamus-networks.com/blog/tag/stamus-security-platform), [Threat intelligence](https://www.stamus-networks.com/blog/tag/threat-intelligence), [Threats! What Threats?](https://www.stamus-networks.com/blog/tag/threats-what-threats)

We talk often about “threats” and “threat detection” in our marketing materials and in discussions...

[Read More](https://www.stamus-networks.com/blog/threats-what-threats)

[![Stamus-Logo-with-R-white](https://www.stamus-networks.com/hs-fs/hubfs/Stamus-Logo-with-R-white.png?width=2000&height=536&name=Stamus-Logo-with-R-white.png "Stamus-Logo-with-R-white")](https://www.stamus-networks.com/?hsLang=en)

 ABOUT STAMUS® NETWORKS

Stamus Networks is the network intelligence foundation for AI-powered security operations and the creator of the Clear NDR® system. Built on Suricata, the world's leading open-source network security engine, Clear NDR transforms raw network traffic into actionable security insights with unmatched transparency, customization, and effectiveness. Designed to close visibility gaps and reduce alert fatigue, Clear NDR is trusted by leading financial institutions, government agencies, and has been battle-tested over ten years in NATO's largest cybersecurity exercises. Stamus Networks empowers security teams with greater control, fewer false positives, faster response times, and a more responsive, open approach than legacy vendors.

- [**](https://www.linkedin.com/company/stamus-networks)
- [**](https://twitter.com/StamusN/)
- [**](https://www.youtube.com/Stamus-Networks)
- [* *](https://discord.gg/JUMSU9uA)
- <https://www.facebook.com/StamusNetworks>

Paris, FranceIndianapolis, USA

**[contact@stamus-networks.com](mailto:contact@stamus-networks.com)

[Privacy](https://www.stamus-networks.com/privacy-policy?hsLang=en)

 © 2014-2026 Stamus Networks, Inc. All rights Reserved.