August 07, 2024

Sophos MDR hunt tracks Mimic ransomware campaign against organizations in India

STAC6451 threat cluster targets Internet-exposed Microsoft SQL servers for initial access

Security Operations

June 30, 2023

Investigator, API Yourself: Deploying Microsoft Graph on the trail of an attacker

Two clients, two threat hunts – any connection? Using Microsoft’s cloud-security API to parse piles of disparate data leads to fascinating findings

Security OperationsThreat Research

February 24, 2022

Secrets of a security analyst: Ensuring 24/7 cover

Tips to help you investigate incidents from experienced security analysts

Security Operations

January 19, 2022

Zloader Installs Remote Access Backdoors and Delivers Cobalt Strike

Security Operations

December 14, 2021

How Sophos XDR enables you to minimize time to detect and respond

The new detection and investigation capabilities in Sophos XDR give operators the deep insights they need to neutralize threats before they become an issue.

Products & Services

December 07, 2021

How four real-world truths about cybersecurity shaped our approach to XDR

Sophos’ mental model for detection and response reflects the way users really work and addresses the challenge of the ‘gray zones’ in cybersecurity.

Products & Services

October 19, 2021

Secrets of a security analyst: Investigating an incident

Tips to help you investigate incidents from experienced security analysts.

Security Operations

October 19, 2021

Secrets of a security analyst: Starting a threat hunt

Learn the basics of starting a threat hunt with tips and tricks from experienced security analysts.

Security Operations

March 16, 2021

IOC Hunting: Leverage MISP threat intel with Sophos Central Live Discover

Quickly identify hosts with IOCs using Sophos Central Live Discover API. Having an ear to the ground just got a little easier.

Products & Services