Damus
Dave Wilburn :donor: · 2w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7yf7cxzxz4kwf24zmflvyqqtrylsjwm5q9a074u5ger57rmzz0aqe544dh my personal experience has been that, at least during incident response, narrowing dow...
Taggart :ifin: profile picture
@nprofile1q... I have a similar experience but if I examine it closely, the who does not matter. I find relevant threat intelligence that describes a similar campaign. Great. I then hunt for those TTPs. At no point does attribution impact my defensive posture.
2
:rainbowCrow: · 2w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7yf7cxzxz4kwf24zmflvyqqtrylsjwm5q9a074u5ger57rmzz0aqe544dh nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq25ys6m6zxxdggtg8vtcycfv2pzmv44h6lsne9d0gy6hz6nd3epvsa3q2xw I agree with an asterisk. If your threat hunt and / or threat intel anal...
Dave Wilburn :donor: · 2w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7yf7cxzxz4kwf24zmflvyqqtrylsjwm5q9a074u5ger57rmzz0aqe544dh Maybe we're talking cross purposes. At least from my experience, the spectrum of attribution can range from a cluster of similar activity on the one end, to specific named organization...