Illuminating DarkSide: TTPs, Tools, and Trend Towards Defense Evasion
Picus Mitigation Library
INDUSTRY-WIDE KNOWLEDGEBASE OF THREAT MITIGATION POLICIES
Picus Mitigation Library offers ad-hoc policy insights relevant to a vast array of security technologies based on technology alliances Picus formed across network security, EDR and SIEM domains.
Illuminating DarkSide: TTPs, Tools, and Trend Towards Defense Evasion
JUNE 16, 2021
The DarkSide ransomware group conducted several high-profile breaches, including the US-based ...
An Underrated Technique to Delete Volume Shadow Copies - DeviceIoControl
JUNE 3, 2021
An Underrated Technique to Delete Volume Shadow Copies - DeviceIoControl
Picus Threat Library Updated for Critical HTTP Protocol Stack Vulnerability (CVE-2021-31166)
MAY 24, 2021
Picus Labs has updated the Picus Threat Library with new vulnerability exploitation attacks ...
UNC2452 (Nobelium) Threat Group Uses GoldMax, GoldFinder, and Sibot Malware
MAY 11, 2021
Picus Labs has updated the Picus Threat Library with new attack methods for malware samples ...
Identify to fix
Identifying the security gaps and shortcomings is a great start, but fixing them is a whole different journey, which is generally long and tedious due to false-positive concerns, operational loads, time limitations, and skill-set constraints.
Mitigate with Speed and Precision
Picus Mitigation Library is generated and maintained by the Picus Labs' Blue Team to provide the security teams with the most relevant and easy to apply mitigation insights of the industry.
While Picus Labs' Red Team adds new adversarial content to the Threat Library, Blue Team examines the solution inventory of Picus' alliance partners, industry frameworks, and community references to enrich each threat and technique sample with the mitigation alternatives.
Picus Mitigation Library provides vendor-specific policy insights for the following categories:
Network Security Controls: Next-generation firewall, network intrusion prevention systems, and web application firewalls*
Endpoint Detection & Response (EDR) solutions*
SIEM* platforms
*Policy update suggestions are provided for the technologies of the vendors that are in the Picus Technology Alliance Ecosystem. Please click to find out more about the Picus Technology Alliance Ecosystem.
Demonstrate your Skills
When tackling persistent and sophisticated threats, security teams need to step in to boost the capabilities of their existing technologies. Finding the right mitigation alternative requires significant effort, time, and know-how. Picus Mitigation Library enables security teams as to when and how to step in with precise terms, eliminating the risk of getting breached and allowing security professionals to demonstrate their skills.
