A year ago I made an argument. This year, we measured it. Last summer I wrote about the Pyramid of Influence — the idea that in a Human-Augmented SOC, not all analyst feedback is equal. Clicking “False Positive” is Tier 1. It decorates the interface. But “FP because powershell.exe is patch automation on this host”
From Influence to Evidence: Teaching the SOC Not to Make the Same Mistake Twice Read More »
How MSSPs can use Stellar Cyber to package identity insight into a timely, scalable managed service that creates new recurring revenue and deeper customer value. The opportunity: turn identity telemetry customers already generate into a managed service that detects abnormal behavior, correlates it with the broader attack, guides response, and proves value with tenant-specific reporting.
Your Customers Already Have IAM. Turn Identity Signals Into Your Next Managed Service. Read More »
Every security team wants better outcomes. Faster detection. Faster triage. Faster investigation. Faster response.But many teams are slowed down by a less visible problem: operational friction. A customer has a data source that is not supported yet. A parser needs to be built. A log format is messy. A hunting playbook works in one environment
The Hidden SecOps Bottleneck: Getting the Right Data In and the Right Actions Out Read More »
Just after the turn of the century, IBM introduced the term, ‘autonomic IT.” At the time, IBM’s perspective was that IT applications, networks, and systems had become too complex for humans to manage, monitor, or secure. IBM presented its autonomic IT concept, with a vision of IT systems that could manage themselves with advanced capabilities
The Human-augmented autonomous SOC: A Perfect Blend of Technology and Humanity Read More »
Network Detection and Response (NDR) has been the Rodney Dangerfield of security tools over the past few years – “it don’t get no respect.” Conceivably, this state of disrepute came from all the marketing money thrown at Endpoint Detection and Response (EDR) and eXtended Detection and Response (XDR). It could also be related to growth
NDR is a Requirement for Modern Security Defenses and the Agentic SOC Read More »
The attacker’s blind spot just disappeared Today’s attackers largely treat software as a black box. Some study open-source software (OSS) to tailor their techniques, but doing this at scale has always been practically impossible which created a natural ceiling on adversarial precision. Mythos removes that ceiling entirely. Because frontier LLMs are trained on virtually all
Recognized by Fast Company, TAG is a trusted next generation research and advisory company that utilizes an AI-powered SaaS platform to deliver on-demand insights, guidance, and recommendations to enterprise teams, government agencies, and commercial vendors in cybersecurity and artificial intelligence, Download TAG Analyst Report Is the human-augmented autonomous SOC a contrarian idea or the next
Lights-Out SOC? Yes, It’s Coming (and Faster Than You Think) Read More »
Six years ago, we founded DTonomy, a security automation company. As security software engineers and data scientists who had worked at the forefront of security operations — from building large-scale AI-based EDR systems to managing daily security operations — we were acutely aware of the challenges security teams face. Triaging security alerts during national holidays,
Hyperautomation for Security Teams Read More »
In a recent conversation with a major educational institution’s CIO, the following circumstance arises: a university administrator is hiring for a position; of over 300 resumes that he receives, 95% of them look so similar that they could have come from the same person. And in a way, they did. With the proliferation of AI-powered
Fighting AI with AI: Tools for the Twenty-First Century Read More »
Recently, MSSP Alert published its yearly report on the Top 250 MSSPs. The report is chock-full of interesting information from a survey of MSSPs that makes it a worthwhile read. Below are a few key takeaways that anyone working with an MSSP, looking to become an MSSP, or an MSP seeking out an MSSP partner
Unpacking the 2023 Top 250 MSSPs Report Read More »
Lessons learned from our search for, and integration of, our XDR Trusted Internet is now deploying Stellar Cyber XDR –as a SOC-monitored solution or as an Infrastructure as a Service. The marketing hype around XDR is deafening for those of you considering an XDR. It’s hard to sort through the slick websites and marketing noise
Considering an XDR Purchase? Here Are Our Lessons Learned. Read More »
I’m sure, like most people reading this blog, the past two-plus years for me were mainly spent in front of my computer, talking with my colleagues, customers, and prospects over Zoom (or your video conferencing provider of choice). So when the opportunity to attend the MSSP Alert Live event in Washington, DC came my way, I hopped
MSSP Alert Live Recap Read More »
I’ve worked with dozens of SecOps and Detection and Response teams over the past few years and it has become crystal clear to me how important it is to fix as many security issues as possible upstream. Or as it is more commonly known, “Shift Left Security”. Broadly, I see three camps on “Shift Left Security”
Economics Of Shift Left Security Read More »
Recently I wrote a blog about what makes a lean security team tick, however, after I posted, it occurred to me that I probably should have spent a few minutes talking about the different types of security teams we run into and how to determine if you fit into the lean security team category. You
What is a Lean Security Team, and how to know if you are part of one Read More »
Cybersecurity systems are ripe for disruption. Over the years, individual tools have proliferated, each with its own data format, causing a deluge of disparate data. Also, there is a global shortage of skilled cybersecurity analysts who can evaluate that data (and they are very expensive if you can find them). Finally, and hackers are getting
Cybersecurity Infrastructure Needs a New Model Read More »
According to the FBI, the number of cyberattacks reported to their Cyber Division is up 400 percent compared to pre-pandemic levels, and attacks are getting worse. From financial sites to healthcare sites to government sites to supply chain industries, no one is safe from these attacks. The traditional defense against these threats is the Security
