Ken Wickman’s Post

🚨 Snowflake customer database instances are being targeted for data theft and extortion. To help defenders, we have released our Snowflake threat hunting guide, which contains guidance and queries for detecting abnormal and malicious activity across Snowflake customer database instances. Read the guide: https://bit.ly/4c3vrSY Read our blog post to uncover findings from our investigations into this threat campaign: https://bit.ly/4b6KUjC #Mandiant #Snowflake #ThreatHunting

Great post from Mandiant (part of Google Cloud) on how to manually hunt Snowflake for suspicious activity. If you are looking to operationalize and scale your Snowflake and SaaS Security, check out Obsidian Security posts around the topic as well. A Practical Guide for Handling Unauthorized Access to Snowflake: https://lnkd.in/gYrPd4Vb Securing Your Snowflake Environments: https://lnkd.in/g_tC9-4Y Happy hunting!

Did you miss this? 🚨 Snowflake customer database instances are being targeted for data theft and extortion. To help defenders, we released a threat hunting guide with guidance and queries for detecting abnormal and malicious activity across Snowflake customer database instances. Read the guide: https://bit.ly/4cg0Gdw Read the blog post to uncover more findings: https://bit.ly/3xFbxia #Mandiant #Snowflake #ThreatHunting

In the aftermath of a cyberattack, swift and effective response is crucial to minimize damage and downtime. The key is restoring systems quickly and safely, often through backups. However, identifying the right recovery point can be challenging. Rubrik’s Threat Hunting feature scans backup snapshots to find indicators of compromise (IOCs), pinpointing the exact time and scope of infection. This precise recovery minimizes data loss and downtime, helping businesses resume normal operations faster. Read More: https://lnkd.in/e8-x_DJK #DOFtechnology #ServiceDriven #DataProtection

Taming the Data Zoo: 3rd-Party Data & Security Let’s imagine data as a zoo full of valuable insights! But wild 3rd-party data can be a security risk. Do share your thoughts on securing bridge to manage this data without letting the tigers loose. #fractal #datagovernance #dataprivacy #collaboration

Rely on Attack Detective to automatically scan your environment with custom parameters and datasets to determine the potential attack surface. Quickly filter the results and verify them in your Data Plane to remediate the threat in the least time possible. https://lnkd.in/duWUn_d6

❌#CAPTCHA farms can't sneak past DataDome! ❌ How does DataDome stop CAPTCHA farms? Learn why these pesky fraudsters stand no chance against our detection techniques. https://gag.gl/ZiX9O5 @https://lnkd.in/eEYdXMBs

Cat’s out of the bag, we’ve revamped our analytics dashboard and infosec Giuseppe is here to tell you all about it.  😻 #insights #data #security #infosec #presales #cat

Start now with Attack Detective to validate your detection stack in less than 300 seconds with an automatic read-only ATT&CK data audit to find blind spots in your log source coverage. https://lnkd.in/duWUn_d6

Start now with Attack Detective to validate your detection stack in less than 300 seconds with an automatic read-only ATT&CK data audit to find blind spots in your log source coverage. https://lnkd.in/duWUn_d6 #threathunting #threatdetection #infosec