Incident Responders need to work their queues in near real-time. Looking at alerts that are days old just doesn’t cut it.
“... CrowdStrike's Global Threat Report found that the average time it takes for an intruder to begin moving laterally to other systems in your network, once a machine has been compromised and a beachhead established, is 1 hour and 58 minutes...”
https://twitter.com/crowdstrike/status/975753829198323713?s=21
No comments:
Post a Comment