Andrew Bentle

SOC | 7 min read

Logs your SOC can use every day: a quick reference guide

We pulled the logs our SOC team use daily into a handy quick reference guide for our analysts—and now, you.

Current events | 7 min read

Attackers are expanding access through Amazon Cognito

Improperly configured AWS Cognito web portals can allow attackers to gain direct access to your AWS control plane. Here's how.

MDR | 4 min read

Attacker-in-the-middle phishing: how attackers bypass MFA

A new "attacker-in-the-middle" (AitM) phishing tactic can end-run your MFA defenses. Get our analysis and learn how to protect your org.

Rapid response | 2 min read

Emerging threat: BEC payroll fraud advisory

Our SOC observed BEC attacks targeting Workday to commit payroll fraud. Learn how to protect your human capital management systems.