NSA Issues Tips for Better Logging, Threat Detection in LotL Incidents
ID: 5b82f11e-1aff-5fa5-9535-cf5a68251ed2
STIX ID: report--5b82f11e-1aff-5fa5-9535-cf5a68251ed2
Feed Name: Dark Reading
The NSA, together with allied agencies, published joint guidance recommending best practices for event logging and threat detection to strengthen defenses against living-off-the-land (LotL) techniques. Aimed at senior IT decision-makers and operators, the guidance emphasizes enterprise-approved logging policies, centralized log correlation and access, secure storage and log integrity, and detection strategies for cloud, enterprise, mobile, and OT networks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.