When An Alarm Isn’t

Vendors like to create an ocean of alarms in their products so they can dogpile after an event and claim that "they caught it." This article goes through the dangers of false positives in incident response and how to address them.

Parsing Vendor Claims of APT Detection Charles Herring

How to parse the claims vendors make in APT detection.

Subscribe to vendor