Detection and Response

Slot Machines and Cybercrime: Why Ransomware Won't Quit Pulling Our Lever

Why the Robot Hackers Aren’t Here (Yet)

Introducing the Manual Regex Editor in IDR’s Parsing Tool: Part 2

Introducing the Manual Regex Editor in IDR’s Parsing Tool: Part 1

Kill Chains: Part 3→What’s next

Jeffrey Gardner

CVE-2021-20025: SonicWall Email Security Appliance Backdoor Credential

Automated remediation level 2: Best practices

Kill Chains: Part 2→Strategic and tactical use cases

Jeffrey Gardner

Kill Chains: Part 1→Strategic and operational value

Jeffrey Gardner

MDR Vendor Must-Haves, Part 9: Assigned Analyst Pods and Security Program Advisors

MDR Vendor Must-Haves, Part 8: Rapid7 Incident Response (Breach) Support

MDR Vendor Must-Haves, Part 4: Ingestion of Authentication Data Across Local, Domain, and Cloud Sources

MDR Vendor Must-Haves, Part 2: Ingestion of Network Device Data

Attack vs. Data: What You Need to Know About Threat Hunting

Jeffrey Gardner

Defending Against the Zero Day: Analyzing Attacker Behavior Post-Exploitation of Microsoft Exchange

SOC Automation with InsightIDR and InsightConnect

Monitor Google Cloud Platform (GCP) Data With InsightIDR

Talkin’ SMAC: Alert Labeling and Why It Matters

matthew berninger

Visualizing Network Traffic Data to Drive Action

Darragh Delaney

Introducing Enhanced Endpoint Telemetry (EET) in InsightIDR

Rapid7 Introduces “Active Response” for End-to-End Detection and Response