Intelligence-Driven Incident Response with YARA

A review of Rapid7 UserInsight by SANS senior analyst Jerry Shenk. It discusses a tool that highlights user credential misuse while tracking endpoint system details that would be valuable to an incident response team.

By

Ricardo Dias

October 20, 2014

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - Reflections on the US Government’s OIG Report_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

December 11, 2024

Reflections on the US Government’s OIG Report on CISA’s Automated Indicator Sharing Program

The memorandum outlined findings and recommendations for improving perceived deficiencies with one of its information sharing programs.

Security Awareness, Artificial Intelligence (AI), Digital Forensics, Incident Response & Threat Hunting, Cloud Security, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Industrial Control Systems Security, Open-Source Intelligence (OSINT)

December 10, 2024

Top SANS Summit Talks of 2024

This year, SANS hosted 13 Summits from OSINT, ICS, Ransomware, DFIR to HackFest. Here were the top-rated talks of the year.

DFIR - Blog - SOF-ELK's Evolution- A Comprehensive Update for Enhanced Digital Forensics_340 x 340(1).jpg

Digital Forensics, Incident Response & Threat Hunting

December 3, 2024

SOF-ELK®'s Evolution: A Comprehensive Update for Enhanced Digital Forensics

SOF-ELK is a free, open source bootable VM preconfigured with a custom Elastic Stack implementation tailored to security and investigative workflows.

Phil Hagen