In the rapidly changing cybersecurity landscape, threat hunting has become a critical
proactive defense against sophisticated cyber threats. While traditional security measures …

With the rapidly evolving technological landscape, the huge development of the Internet of
Things, and the embracing of digital transformation, the world is witnessing an explosion in …

Lateral movement is a key stage of system compromise used by advanced persistent
threats. Detecting it is no simple task. When network host logs are abstracted into discrete …

Cybersecurity currently focuses primarily on defenses that detect and prevent cyber-attacks.
However, it is more important to regularly verify an organization's security posture to …

Lateral Movement (LM) is one of the core stages of advanced persistent threats which
continues to compromise the security posture of enterprise networks at large. Recent …

Lateral movement (LM) is a principal, increasingly common, tactic in the arsenal of
advanced persistent threat (APT) groups and other less or more powerful threat actors. It …

This work attempts to answer in a clear way the following key questions regarding the
optimal initialization of the Sysmon tool for the identification of Lateral Movement in the MS …

Cyber-attacks have become increasingly sophisticated, which also drives the development
of security analytics that produce countermeasures by mining organizational logs, eg …

Past Advanced Persistent Threat (APT) attacks on Industrial Internet-of-Things (IIoT), such as
the 2016 Ukrainian power grid attack and the 2017 Saudi petrochemical plant attack, have …

Cyberattacks have grown into a major risk for organizations, with common consequences
being data theft, sabotage, and extortion. Since preventive measures do not suffice to repel …