Pulsedive provides threat intelligence services that include on-demand passive or active scans on IPs, URLs, and domains, enriched with MITRE ATT&CK data. It allows users to query indicators and threats with boolean logic, and offers integration with various third-party security solutions.

Pulsedive

Pulsedive Threat Intelligence  | 5,277 followers on LinkedIn. Frictionless threat intelligence solutions for growing teams. | Frictionless threat intelligence solutions for growing teams.

Pulsedive Community&#39;s intuitive search and risk scoring paired with enriched, contextual data keeps busy teams prioritized – eliminating wasteful false-positive investigations. With quick-start use and the ability to integrate with internal systems, teams can flexibly leverage Pulsedive’s one-stop-shop platform and data.

Founder & CEO at Pulsedive

Dan Sherry

Pulsedive Threat Intelligence

New Threat: Ymir Ransomware https://lnkd.in/dnQGU-RW Highlights: - Uses the ChaCha20 algorithm to encrypt files - Encrypted files have extension ".6C5oy2dVr6" - Before encrypting files with Ymir, threat actors used tools such as Process Hacker and Advanced IP Scanner - Drops the ransomware note as a PDF Credit to the Kaspersky team's research on the new and active Ymir Ransomware family: https://lnkd.in/gKwFdRmk

Who's consuming your intel - and why do they want it? Pulsedive Blog: Leveraging Threat Intelligence in Security Operations "For Cyber Threat Intelligence to be effective, it needs to be appropriate for the consumer of such information which may cover a broad audience range depending on the intelligence disseminated.... The Actionable criterion can help determine what sort of information needs to be shared with different audiences. As such, CTI often gets bucketed into three categories: strategic, operational and tactical intelligence." Read more: https://lnkd.in/ehu_zS4g

Newly Updated: Monster + Beast Threat Pages Monster: https://lnkd.in/ehwa8ZT5 Delphi-based RaaS targeting Windows first observed in 2022. Beast: https://lnkd.in/eZaUDXME Enhanced variant of Monster with ongoing version updates that expands to target Windows, Linux, and ESXI operating systems.

Mark your calendars. Just about 3 weeks until our Black Friday deal. To stay up to date: - Follow us here on LinkedIn - Join our Slack ( https://lnkd.in/d_7vRNw ) - Check our blog ( https://lnkd.in/etE8-k3w )

New Threat Pages: GobRAT + Bulbature https://lnkd.in/e2AEYQp4 https://lnkd.in/ee8bSFsk Credit to the Sekoia.io Threat Detection & Research Team - including authors Amaury G and Felix Aimé - for investigating the infrastructure controlling compromised edge devices transformed into Operational Relay Boxes, which was used to launch cyber attacks. Report: https://lnkd.in/g59AGsqD

Community Resource Share: Curated Intelligence 's "CTI Research Guide" Overview: https://lnkd.in/df_t5jpA Github: https://lnkd.in/ez2NwQ6G

Did somebody say Security Awareness Month? Check out our latest blog, exploring the essential role of Cyber Threat Intelligence (CTI) in understanding and mitigating cybersecurity threats - detailing its types, processes, and effective implementation in enhancing security operations across the org. Read: https://lnkd.in/ehu_zS4g

Remote working today! Meeting with friends & relationships. Also, that newsletter doesn’t write itself either (hence the frown)! When the home office is the ‘office’, everything else is remote. Folks that work on Venation just make things work & get it done, wherever they are. Have a great Friday! Oh, don’t forget to signup for the newsletter. Grab it here: https://lnkd.in/eWwxc5bQ --- Enjoy this? ♻️ Repost it to your network and follow Gert-Jan B. & Venation for more. Want proven systems to make smarter decisions on managing risk? Join our community of forward-thinking cybersecurity decision-makers today: https://lnkd.in/eWwxc5bQ PS slick product placement from Pulsedive Threat Intelligence Grace C. Dan Sherry Nicole H. SpaceX MITRE ATT&CK FIRST SCYTHE Flipper Devices Inc Andy Piazza

Gert-Jan B.

Check out the Security Operations Center ( #SOC ) Findings Report from RSA Conference ( #RSAC ) 2024. We deployed the NetWitness platform. We also utilized Secure #Firewall and the Cisco Security Cloud. Incidents under investigation were correlated with threat intelligence, provided by Cisco Talos , and licenses provided by alphaMountain.ai , IBM X-Force Exchange, Pulsedive Threat Intelligence and Recorded Future , and community sources. Splunk Enterprise Security was used as a Security Incident and Event Management (SIEM) platform. My thanks to Steve Fink and the entire SOC team. https://lnkd.in/eytGfh2W

Jessica (Bair) Oppenheimer

New Threat Page: Lynx Ransomware - Rebrand of INC Ransomware - Discovered by Palo Alto Networks Unit 42 in July 2024 - Ransomware-as-a-Service (RaaS) operation - Delivery via phishing emails, malicious downloads More information about Lynx at: https://lnkd.in/evyEh4ja

PULS

COM:PULSEDIVE

Pulsedive