Canary in a Coal Mine - Seguridad Mania.com - España y América Latina

Cyber defenders strive to make their organization a hard target for attackers by building strong perimeters and training fellow staff to counter the tactics attackers use. No amount of defense, however, can stop a determined, well-resourced adversary from finding a way in. Instead of exclusively focusing on the techniques that lead to compromising an account and the protections that will inevitably, eventually fail, network defenders can anticipate a breach and prepare for it by using detection capabilities that exploit the attacker’s goal of obtaining a valid account to maneuver. An effective defensive cyber operations team fuses the knowledge of the system under protection with a defensive strategy that anticipates an attacker breaching the system and using valid accounts to enable many of the techniques identified in the MITRE ATT&CK framework. In this environment, a little deception goes a long way.