decision-making - Quasarops

The Problem of Why: Threat-Informed Prioritization in Security Operations. Part 1.

What does it mean to be threat-informed when it comes to Cyber Defence? It is one of those classic tough questions that don't have simple answers (at least not ones that are immediately obvious). The great Anton Chuvakin circled back to this topic recently. In this article, he

By Diego Perez

#aimod2

The Threat Hunting Shift. Part 4: Adversarial Framework for Tactical Cyber Defense Operations II

Continuing from Threat Hunting Shift Part 3, we will now introduce the Defend and Design domains. So without further ado, let’s dig into it! Note: If you haven’t read the previous post, where I present the Discover and Disrupt domains, I advice you head there and give it

By Diego Perez

#aimod2

The Threat Hunting Shift. Part 3: Adversarial Framework for Tactical Cyber Defense Operations I

Active Defence Adversarial Cyber Operations Framework or ADACOP, is a framework for sense-making and understanding the relationships between the different domains of active defence. ADACOP describes four tactical domains, namely: Design, Discover, Disrupt and Defend.

By Diego Perez