Creating PANDA-monium. [Research Saturday]
CyberWire Daily
00:00
Advanced Capabilities for Threat Hunters and Investigators
A key focus for managed detection and response type capabilities is being able to take that corrective action very, very quickly. We reported in our annual threat report this past year that breakout time had dropped to about 84 minutes so just under two hours from the time a threat actor gains access to the environment until they can move laterally towards a target. Threat actors don't just operate Monday morning at nine o'clock. They're typically operating off hours so being able to hunt against the infrastructure I think is really important.
Play episode from 09:35
Transcript
