March 20, 2024

Remote Desktop Protocol: Executing the 4624_4625 Login Query

Keeping an eye on who’s trying to get onto your network – whether or not they’re successful – can pay off on multiple fronts

Security Operations

March 20, 2024

Remote Desktop Protocol: Executing the External RDP Query

On the hunt for successful RDP connections that have entered your network from outside? A step-by-step guide (and a query to get you started)

Security Operations

August 23, 2023

Time keeps on slippin’ slippin’ slippin’: The 2023 Active Adversary Report for Tech Leaders

A deep dive into incident-response cases from the first half of this year finds both attackers and defenders picking up the pace

Threat Research

December 19, 2022

Network security best practices for the holiday season

Tips to better protect your network while you take some well-deserved time out.

Products & Services

July 18, 2021

Hindsight #2: Block public facing Remote Desktop Protocol (RDP)

Hindsight security: things breach victims wish they had done

Products & Services

May 06, 2021

MTR in Real Time: Pirates pave way for Ryuk ransomware

Security Operations

May 05, 2021

Intervention halts a ProxyLogon-enabled attack

A late charge by a cavalry of reinforcements prevented the attackers from causing greater harm

SophosLabs UncutThreat Research

November 18, 2020

Sophos’ 2021 threat report highlights a path forward

Sophos' annual roundup of the security threats that demand attention in 2021

MTRSophosLabs UncutThreat Research

August 11, 2020

Demo: Find open RDP sessions using Sophos Live Discover

Products