41554 blogs · [ { "id": "01a0dd01-5412-71b4-aebc-557567901118", "title": "Getting started with Conditional Access: Comparing Entra ID Conditional Access with Cisco Duo Security", "url": "https://redcanary.com/blog/security-operations/conditional-access-cisco-duo/", "published_at": "2025-05-21T14:12:20+00:00" }, { "id": "01a0dd01-5412-71b4-aebc-557567ffe436", "title": "Getting started with Conditional Access: Comparing Entra ID Conditional Access with Okta", "url": "https://redcanary.com/blog/security-operations/getting-started-with-conditional-access-comparing-entra-id-with-okta/", "published_at": "2025-05-14T15:55:23+00:00" }, { "id": "01a0dd01-5412-71b4-aebc-557568f51a85", "title": "Getting started with Conditional Access: 5 must-have Entra ID policies", "url": "https://redcanary.com/blog/security-operations/getting-started-with-conditional-access/", "published_at": "2025-05-07T18:19:13+00:00" }, { "id": "01a0dd01-5412-71b4-aebc-557569a4ef70", "title": "Critical vulnerability in SAP NetWeaver enables malicious file uploads", "url": "https://redcanary.com/blog/threat-intelligence/cve-2025-31324/", "published_at": "2025-04-30T20:38:55+00:00" }, { "id": "01a0dd01-5412-71b4-aebc-55756a01d002", "title": "Intelligence Insights: April 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-april-2025/", "published_at": "2025-04-24T13:53:18+00:00" }, { "id": "01a0dd01-5412-71b4-aebc-55756a383825", "title": "Cybersecurity metrics that matter (and how to measure them)", "url": "https://redcanary.com/blog/threat-detection/cybersecurity-metrics/", "published_at": "2025-04-23T14:25:04+00:00" }, { "id": "01a0dd01-5412-71b4-aebc-55756a86d169", "title": "Red Canary’s favorite cybersecurity podcasts", "url": "https://redcanary.com/blog/security-operations/best-cybersecurity-podcasts/", "published_at": "2025-04-17T19:44:19+00:00" }, { "id": "01a0dd01-5412-71b4-aebc-55756b3e0c91", "title": "Creating user baseline reports to identify malicious logins", "url": "https://redcanary.com/blog/threat-detection/user-baseline-identity-security/", "published_at": "2025-04-10T14:29:02+00:00" }, { "id": "01a0dd01-5412-71b4-aebc-55756b6b82cf", "title": "The RSAC 2025 Conference talks worth catching", "url": "https://redcanary.com/blog/security-operations/rsa-2025-conference/", "published_at": "2025-04-03T15:52:14+00:00" }, { "id": "01a0dd01-5412-71b4-aebc-55756bb912b4", "title": "2025 Threat Detection Report: Practitioner playbook", "url": "https://redcanary.com/blog/threat-detection/threat-detection-report-practitioner-playbook/", "published_at": "2025-03-27T14:37:16+00:00" }, { "id": "01a0dd10-0c14-719e-9bee-b76e2a07476e", "title": "Intelligence Insights: March 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-march-2025/", "published_at": "2025-03-20T19:24:39+00:00" }, { "id": "01a0dd10-0c14-719e-9bee-b76e2a5838f4", "title": "What does Google’s $32B acquisition of cloud security startup Wiz mean for security operations?", "url": "https://redcanary.com/blog/security-operations/google-wiz-acquisition/", "published_at": "2025-03-20T17:42:00+00:00" }, { "id": "01a0dd10-0c14-719e-9bee-b76e2b48ffd8", "title": "Identity attacks and infostealers dominate the 2025 Threat Detection Report", "url": "https://redcanary.com/blog/threat-detection/2025-threat-detection-report/", "published_at": "2025-03-18T14:59:14+00:00" }, { "id": "01a0dd10-0c14-719e-9bee-b76e2bb36251", "title": "Red Canary named a Leader in MDR", "url": "https://redcanary.com/blog/product-updates/leader-in-mdr/", "published_at": "2025-03-06T20:49:45+00:00" }, { "id": "01a0dd10-0c14-719e-9bee-b76e2c83a1f6", "title": "Dive into the Red Canary Security Data Lake", "url": "https://redcanary.com/blog/product-updates/security-data-lake/", "published_at": "2025-03-03T19:57:29+00:00" }, { "id": "01a0dd10-0c14-719e-9bee-b76e2d58d56f", "title": "Polishing Ruby on Rails with RSpec metadata", "url": "https://redcanary.com/blog/security-operations/ruby-on-rails-rspec/", "published_at": "2025-02-26T14:45:02+00:00" }, { "id": "01a0dd10-0c14-719e-9bee-b76e2dcee3a9", "title": "Intelligence Insights: February 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-february-2025/", "published_at": "2025-02-20T18:29:38+00:00" }, { "id": "01a0dd10-0c14-719e-9bee-b76e2dcfce79", "title": "Defying tunneling: A Wicked approach to detecting malicious network traffic", "url": "https://redcanary.com/blog/threat-detection/network-traffic-tunneling/", "published_at": "2025-02-12T14:06:22+00:00" }, { "id": "01a0dd10-0c14-719e-9bee-b76e2e83e0f5", "title": "CopyObjection: Fending off ransomware in AWS", "url": "https://redcanary.com/blog/incident-response/aws-ransomware/", "published_at": "2025-02-04T13:43:05+00:00" }, { "id": "01a0dd10-0c14-719e-9bee-b76e2ebc60a7", "title": "The unusual suspects: Effectively identifying threats via unusual behaviors", "url": "https://redcanary.com/blog/product-updates/ai-agents-unusual-behaviors/", "published_at": "2025-01-28T14:11:40+00:00" }, { "id": "01a0dd1f-fbe8-7075-9455-e3bfa2d9adb7", "title": "Intelligence Insights: January 2025", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-january-2025/", "published_at": "2025-01-23T20:46:24+00:00" }, { "id": "01a0dd1f-fbe8-7075-9455-e3bfa3682803", "title": "Tangerine Turkey mines cryptocurrency in global campaign", "url": "https://redcanary.com/blog/threat-intelligence/tangerine-turkey/", "published_at": "2025-01-23T20:46:18+00:00" }, { "id": "01a0dd1f-fbe8-7075-9455-e3bfa4364f09", "title": "What we learned by integrating with Google Cloud Platform", "url": "https://redcanary.com/blog/security-operations/gcp-integration/", "published_at": "2025-01-21T14:40:10+00:00" }, { "id": "01a0dd1f-fbe8-7075-9455-e3bfa4cc2900", "title": "Incorporating AI agents into SOC workflows", "url": "https://redcanary.com/blog/threat-detection/ai-agents/", "published_at": "2025-01-16T14:27:37+00:00" }, { "id": "01a0dd1f-fbe8-7075-9455-e3bfa5a7fb25", "title": "Shrinking the haystack: The six phases of cloud threat detection", "url": "https://redcanary.com/blog/threat-detection/cloud-threat-detection/", "published_at": "2025-01-08T14:29:34+00:00" }, { "id": "01a0dd1f-fbe8-7075-9455-e3bfa684a9d0", "title": "Shrinking the haystack: Building a cloud threat detection engine", "url": "https://redcanary.com/blog/threat-detection/cloud-threat-detection-engine/", "published_at": "2025-01-08T14:29:01+00:00" }, { "id": "01a0dd1f-fbe8-7075-9455-e3bfa741d72f", "title": "Intelligence Insights: December 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-december-2024/", "published_at": "2024-12-20T14:16:40+00:00" }, { "id": "01a0dd1f-fbe8-7075-9455-e3bfa8157666", "title": "Red Canary’s best of 2024", "url": "https://redcanary.com/blog/security-operations/best-of-2024/", "published_at": "2024-12-18T15:33:56+00:00" }, { "id": "01a0dd1f-fbe8-7075-9455-e3bfa8ec1d0d", "title": "A defender’s guide to identity attacks", "url": "https://redcanary.com/blog/threat-detection/identity-attacks/", "published_at": "2024-12-16T17:00:08+00:00" }, { "id": "01a0dd1f-fbe8-7075-9455-e3bfa99d5800", "title": "Single sign-on, double trouble: Credential theft using AWS access tokens", "url": "https://redcanary.com/blog/threat-detection/aws-sso-access-tokens/", "published_at": "2024-12-12T13:44:51+00:00" }, { "id": "01a0dd2f-fbce-7204-af1f-611154826fac", "title": "The three keys to threat hunting", "url": "https://redcanary.com/blog/threat-detection/threat-hunting-guidance/", "published_at": "2024-12-11T13:27:27+00:00" }, { "id": "01a0dd2f-fbdd-72d5-b4d0-86ed118a50d5", "title": "Red Canary: At the heart of your security operations", "url": "https://redcanary.com/blog/product-updates/integration-ecosystem/", "published_at": "2024-12-10T23:31:51+00:00" }, { "id": "01a0dd2f-fbdd-72d5-b4d0-86ed12453f0a", "title": "The dark cloud around GCP service accounts", "url": "https://redcanary.com/blog/threat-detection/gcp-service-accounts/", "published_at": "2024-12-05T21:53:59+00:00" }, { "id": "01a0dd2f-fbdd-72d5-b4d0-86ed1310b977", "title": "Storm-1811 exploits RMM tools to drop Black Basta ransomware", "url": "https://redcanary.com/blog/threat-intelligence/storm-1811-black-basta/", "published_at": "2024-12-02T21:11:41+00:00" }, { "id": "01a0dd2f-fbdd-72d5-b4d0-86ed13a5d2ee", "title": "Safeguard your identities with Red Canary + CrowdStrike Falcon® Identity Protection", "url": "https://redcanary.com/blog/product-updates/crowdstrike-falcon-identity-protection-integration/", "published_at": "2024-11-26T21:07:22+00:00" }, { "id": "01a0dd2f-fbdd-72d5-b4d0-86ed14547f75", "title": "Intelligence Insights: November 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-november-2024/", "published_at": "2024-11-21T18:03:58+00:00" }, { "id": "01a0dd2f-fbdd-72d5-b4d0-86ed14600223", "title": "Why CISOs under consolidation pressure are embracing Microsoft Security solutions", "url": "https://redcanary.com/blog/microsoft/tool-consolidation-microsoft/", "published_at": "2024-11-14T13:41:10+00:00" }, { "id": "01a0dd2f-fbdd-72d5-b4d0-86ed14c45a28", "title": "Stealers evolve to bypass Google Chrome’s new app-bound encryption", "url": "https://redcanary.com/blog/threat-intelligence/google-chrome-app-bound-encryption/", "published_at": "2024-11-13T17:54:10+00:00" }, { "id": "01a0dd2f-fbdd-72d5-b4d0-86ed1597cdad", "title": "Explore the new Atomic Red Team website", "url": "https://redcanary.com/blog/testing-and-validation/atomic-red-team-website/", "published_at": "2024-11-13T17:40:12+00:00" }, { "id": "01a0dd2f-fbdd-72d5-b4d0-86ed1685c33e", "title": "From the dreamhouse to the SOC: Ken’s guide to security", "url": "https://redcanary.com/blog/threat-detection/kens-guide-to-cybersecurity/", "published_at": "2024-11-12T14:21:56+00:00" }, { "id": "01a0dd42-015e-712e-b870-7418bbbdc5a8", "title": "Artificial authentication: Understanding and observing Azure OpenAI abuse", "url": "https://redcanary.com/blog/threat-detection/azure-openai-abuse/", "published_at": "2024-10-30T18:34:43+00:00" }, { "id": "01a0dd42-015e-712e-b870-7418bc5698f2", "title": "Intelligence Insights: October 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-october-2024/", "published_at": "2024-10-24T18:26:02+00:00" }, { "id": "01a0dd42-015e-712e-b870-7418bca47db8", "title": "Apple picking: Bobbing for Atomic Stealer & other macOS malware", "url": "https://redcanary.com/blog/threat-detection/atomic-stealer/", "published_at": "2024-10-10T13:15:51+00:00" }, { "id": "01a0dd42-015e-712e-b870-7418bce24c2f", "title": "Infosec horoscopes: Astrology for SOC teams", "url": "https://redcanary.com/blog/security-operations/infosec-horoscopes/", "published_at": "2024-10-03T16:27:04+00:00" }, { "id": "01a0dd42-015e-712e-b870-7418bd1fb594", "title": "Intelligence Insights: September 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-september-2024/", "published_at": "2024-09-26T16:18:23+00:00" }, { "id": "01a0dd42-015e-712e-b870-7418bdda6404", "title": "Keep track of AWS user activity with SourceIdentity attribute", "url": "https://redcanary.com/blog/threat-detection/aws-sourceidentity/", "published_at": "2024-09-24T14:58:22+00:00" }, { "id": "01a0dd42-015e-712e-b870-7418bea00d44", "title": "Trending cyberthreats and techniques from the first half of 2024", "url": "https://redcanary.com/blog/threat-detection/midyear-2024/", "published_at": "2024-09-19T13:49:03+00:00" }, { "id": "01a0dd42-015e-712e-b870-7418bf24dafc", "title": "The CrowdStrike outage: Detection and defense in depth", "url": "https://redcanary.com/blog/security-operations/defense-in-depth/", "published_at": "2024-09-12T13:40:15+00:00" }, { "id": "01a0dd42-015e-712e-b870-7418bf5f1078", "title": "Detecting brute-force attacks with a smart watchlist", "url": "https://redcanary.com/blog/threat-detection/brute-force-attacks/", "published_at": "2024-09-10T14:41:43+00:00" }, { "id": "01a0dd42-015e-712e-b870-7418c055d447", "title": "Reel in troves of data with webhooks", "url": "https://redcanary.com/blog/security-operations/webhooks/", "published_at": "2024-08-29T17:04:30+00:00" }, { "id": "01a0dd55-f61e-7275-a2a7-f96b565c6543", "title": "Recent dllFake activity shares code with SecondEye", "url": "https://redcanary.com/blog/threat-intelligence/dllfake-secondeye/", "published_at": "2024-08-26T19:09:21+00:00" }, { "id": "01a0dd55-f61f-73ba-9d8c-71a79a8b9067", "title": "Intelligence Insights: August 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-august-2024/", "published_at": "2024-08-22T15:40:48+00:00" }, { "id": "01a0dd55-f61f-73ba-9d8c-71a79b26ec98", "title": "A defender’s guide to crypters and loaders", "url": "https://redcanary.com/blog/threat-detection/crypters-and-loaders/", "published_at": "2024-08-05T22:07:16+00:00" }, { "id": "01a0dd55-f61f-73ba-9d8c-71a79b4b608d", "title": "Certified evil: Investigating signed malicious binaries", "url": "https://redcanary.com/blog/threat-detection/code-signing-certificates/", "published_at": "2024-07-31T19:22:21+00:00" }, { "id": "01a0dd55-f61f-73ba-9d8c-71a79b7b8aa2", "title": "5 lessons for entry-level software engineers", "url": "https://redcanary.com/blog/life-at-red-canary/entry-level-software-engineers/", "published_at": "2024-07-31T14:20:38+00:00" }, { "id": "01a0dd55-f61f-73ba-9d8c-71a79b9abff2", "title": "Intelligence Insights: July 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-july-2024/", "published_at": "2024-07-25T17:27:14+00:00" }, { "id": "01a0dd55-f61f-73ba-9d8c-71a79bf2e6c3", "title": "How Red Canary works to create an accessible coding environment for all", "url": "https://redcanary.com/blog/life-at-red-canary/accessible-coding/", "published_at": "2024-07-17T15:08:00+00:00" }, { "id": "01a0dd55-f61f-73ba-9d8c-71a79cae1d56", "title": "Halting a hospital ransomware attack", "url": "https://redcanary.com/blog/incident-response/hospital-ransomware-attack/", "published_at": "2024-07-08T13:34:57+00:00" }, { "id": "01a0dd55-f61f-73ba-9d8c-71a79cf0e3c3", "title": "Navigating the cloud security landscape", "url": "https://redcanary.com/blog/security-operations/cloud-security-landscape/", "published_at": "2024-06-27T14:09:57+00:00" }, { "id": "01a0dd55-f61f-73ba-9d8c-71a79d41ae71", "title": "Scarlet Goldfinch: Taking flight with NetSupport Manager", "url": "https://redcanary.com/blog/threat-intelligence/scarlet-goldfinch/", "published_at": "2024-06-26T14:29:24+00:00" }, { "id": "01a0dd68-56db-73bc-84ee-f2f14c3a0dc1", "title": "Intelligence Insights: June 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-june-2024/", "published_at": "2024-06-20T17:03:54+00:00" }, { "id": "01a0dd68-56db-73bc-84ee-f2f14d33ce49", "title": "The unsung security benefits of cloud migration", "url": "https://redcanary.com/blog/security-operations/cloud-security-benefits/", "published_at": "2024-06-13T14:23:33+00:00" }, { "id": "01a0dd68-56db-73bc-84ee-f2f14df583ec", "title": "The role of GenAI in Red Canary’s security evolution", "url": "https://redcanary.com/blog/security-operations/genai-podcast/", "published_at": "2024-06-10T15:36:42+00:00" }, { "id": "01a0dd68-56db-73bc-84ee-f2f14dffff72", "title": "What to consider when evaluating EDR", "url": "https://redcanary.com/blog/security-operations/evaluating-edr/", "published_at": "2024-06-03T14:31:39+00:00" }, { "id": "01a0dd68-56db-73bc-84ee-f2f14e1d7175", "title": "Open with Notepad: Protecting users from malicious JavaScript", "url": "https://redcanary.com/blog/threat-intelligence/notepad-javascript/", "published_at": "2024-05-31T15:51:09+00:00" }, { "id": "01a0dd68-56db-73bc-84ee-f2f14ed10002", "title": "Accelerating identity threat detection and response with GenAI", "url": "https://redcanary.com/blog/security-operations/genai-identity-threat-detection/", "published_at": "2024-05-30T13:59:00+00:00" }, { "id": "01a0dd68-56db-73bc-84ee-f2f14fc6cb21", "title": "How cloud architects and detection engineers can work together", "url": "https://redcanary.com/blog/security-operations/cloud-architects-vs-detection-engineers/", "published_at": "2024-05-29T14:00:15+00:00" }, { "id": "01a0dd68-56db-73bc-84ee-f2f15036a701", "title": "Intelligence Insights: May 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-may-2024/", "published_at": "2024-05-23T19:45:27+00:00" }, { "id": "01a0dd68-56db-73bc-84ee-f2f15079267c", "title": "Engineering a MDR solution for Microsoft Azure", "url": "https://redcanary.com/blog/security-operations/mdr-for-microsoft-azure/", "published_at": "2024-05-22T14:58:16+00:00" }, { "id": "01a0dd68-56db-73bc-84ee-f2f150e1dc59", "title": "Red Canary coverage of Google Cloud Platform enters general availability", "url": "https://redcanary.com/blog/product-updates/google-cloud-platform-integration/", "published_at": "2024-05-21T12:00:33+00:00" }, { "id": "01a0dd72-3830-7354-a9e7-37b2c09212c1", "title": "How adversaries use Entra ID service principals in business email compromise schemes", "url": "https://redcanary.com/blog/threat-detection/entra-id-service-principals/", "published_at": "2024-05-16T17:42:25+00:00" }, { "id": "01a0dd72-3830-7354-a9e7-37b2c14b47c8", "title": "MSIX and other tricks: How to detect malicious installer packages", "url": "https://redcanary.com/blog/threat-detection/installer-packages/", "published_at": "2024-05-09T14:04:17+00:00" }, { "id": "01a0dd72-3830-7354-a9e7-37b2c23eda28", "title": "The detection engineer’s guide to Linux", "url": "https://redcanary.com/blog/linux-security/detection-engineer-guide-to-linux/", "published_at": "2024-05-02T14:14:13+00:00" }, { "id": "01a0dd72-3830-7354-a9e7-37b2c323110a", "title": "The benefits of GenAI by SOC function", "url": "https://redcanary.com/blog/security-operations/benefits-of-genai-by-soc-function/", "published_at": "2024-04-30T15:20:03+00:00" }, { "id": "01a0dd72-3830-7354-a9e7-37b2c3424bfd", "title": "Manage your SOC like a product", "url": "https://redcanary.com/blog/security-operations/manage-your-soc-like-a-product/", "published_at": "2024-04-25T14:16:59+00:00" }, { "id": "01a0dd72-3830-7354-a9e7-37b2c43fdd2d", "title": "The RSA Conference talks we’re looking forward to most", "url": "https://redcanary.com/blog/security-operations/rsa-2024/", "published_at": "2024-04-24T14:04:41+00:00" }, { "id": "01a0dd72-3830-7354-a9e7-37b2c51b3129", "title": "Intelligence Insights: April 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-april-2024/", "published_at": "2024-04-18T15:30:41+00:00" }, { "id": "01a0dd72-3830-7354-a9e7-37b2c579f843", "title": "Translating our detection engine: A journey from JRuby to Go", "url": "https://redcanary.com/blog/security-operations/jruby-to-go/", "published_at": "2024-04-10T13:49:58+00:00" }, { "id": "01a0dd72-3830-7354-a9e7-37b2c601a45e", "title": "Holding down the Fortinet vulnerability", "url": "https://redcanary.com/blog/threat-intelligence/cve-2023-48788/", "published_at": "2024-04-08T16:07:21+00:00" }, { "id": "01a0dd72-3830-7354-a9e7-37b2c694ad66", "title": "The Trainman’s Guide to overlooked entry points in Microsoft Azure", "url": "https://redcanary.com/blog/threat-detection/microsoft-azure-entry/", "published_at": "2024-04-03T13:58:25+00:00" }, { "id": "01a0dd87-158d-71df-b7aa-bdbd7cd08ecf", "title": "Teaming with Microsoft Copilot for Security", "url": "https://redcanary.com/blog/product-updates/microsoft-copilot-for-security/", "published_at": "2024-04-01T14:06:33+00:00" }, { "id": "01a0dd87-158e-7344-a3ec-0e84b4c0634b", "title": "Best practices for securing Azure Active Directory", "url": "https://redcanary.com/blog/security-operations/azure-active-directory/", "published_at": "2024-03-28T14:05:56+00:00" }, { "id": "01a0dd87-158e-7344-a3ec-0e84b59dd954", "title": "Coming to a city near you, it’s Red Canary Live!", "url": "https://redcanary.com/blog/security-operations/red-canary-live/", "published_at": "2024-03-25T15:49:15+00:00" }, { "id": "01a0dd87-158e-7344-a3ec-0e84b697b5cf", "title": "Intelligence Insights: March 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights-march-2024/", "published_at": "2024-03-21T17:43:12+00:00" }, { "id": "01a0dd87-158e-7344-a3ec-0e84b704d895", "title": "The rise of Charcoal Stork", "url": "https://redcanary.com/blog/threat-intelligence/charcoal-stork/", "published_at": "2024-03-18T17:08:56+00:00" }, { "id": "01a0dd87-158e-7344-a3ec-0e84b70a799f", "title": "Inside the 2024 Threat Detection Report", "url": "https://redcanary.com/blog/threat-detection/2024-threat-detection-report/", "published_at": "2024-03-13T13:18:40+00:00" }, { "id": "01a0dd87-158e-7344-a3ec-0e84b747d523", "title": "Introducing Red Canary’s multicloud launch", "url": "https://redcanary.com/blog/product-updates/introducing-multi-cloud-launch/", "published_at": "2024-03-05T14:30:42+00:00" }, { "id": "01a0dd87-158e-7344-a3ec-0e84b77095e1", "title": "Red Canary brings MDR expertise to Microsoft Azure Cloud", "url": "https://redcanary.com/blog/product-updates/microsoft-azure-cloud/", "published_at": "2024-03-05T14:30:16+00:00" }, { "id": "01a0dd87-158e-7344-a3ec-0e84b79698a3", "title": "Better know a data source: Files", "url": "https://redcanary.com/blog/threat-detection/better-know-a-data-source/better-know-a-data-source-files/", "published_at": "2024-03-04T15:45:37+00:00" }, { "id": "01a0dd87-158e-7344-a3ec-0e84b7b566f6", "title": "Strengthen your Core with NIST’s updated cybersecurity framework", "url": "https://redcanary.com/blog/security-operations/nist-csf/", "published_at": "2024-02-28T21:22:32+00:00" }, { "id": "01a0dd95-9ef6-72c3-a61e-4a91bdd34199", "title": "Using GenAI to improve security operations", "url": "https://redcanary.com/blog/security-operations/genai-security-operations/", "published_at": "2024-02-27T14:35:05+00:00" }, { "id": "01a0dd95-9ef6-72c3-a61e-4a91becc7929", "title": "Intelligence Insights: February 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights/intelligence-insights-february-2024/", "published_at": "2024-02-22T23:45:19+00:00" }, { "id": "01a0dd95-9ef6-72c3-a61e-4a91bf1a3886", "title": "Why adversaries have their heads in the cloud", "url": "https://redcanary.com/blog/threat-detection/cloud-attack-techniques/", "published_at": "2024-01-31T16:00:19+00:00" }, { "id": "01a0dd95-9ef6-72c3-a61e-4a91bfe42ae3", "title": "Intelligence Insights: January 2024", "url": "https://redcanary.com/blog/threat-intelligence/intelligence-insights/intelligence-insights-january-2024/", "published_at": "2024-01-25T21:47:40+00:00" }, { "id": "01a0dd95-9ef6-72c3-a61e-4a91c00d4b33", "title": "Mastering Kubernetes security: Safeguarding your container kingdom", "url": "https://redcanary.com/blog/security-operations/kubernetes-security/", "published_at": "2024-01-18T15:44:54+00:00" }, { "id": "01a0dd95-9ef6-72c3-a61e-4a91c0d6f6fd", "title": "Misbehaving binaries: How to detect LOLBin abuse in the wild", "url": "https://redcanary.com/blog/blog/lolbins-abuse/", "published_at": "2024-01-16T14:41:59+00:00" }, { "id": "01a0dd95-9ef6-72c3-a61e-4a91c1836ee6", "title": "MSIX installer malware delivery on the rise across multiple campaigns", "url": "https://redcanary.com/blog/threat-intelligence/msix-installers/", "published_at": "2024-01-12T19:01:37+00:00" }, { "id": "01a0dd95-9ef6-72c3-a61e-4a91c1b72000", "title": "Emu-lation: Validating detections for SocGholish with Atomic Red Team", "url": "https://redcanary.com/blog/testing-and-validation/socgholish-emulation/", "published_at": "2024-01-09T19:43:17+00:00" }, { "id": "01a0dd95-9ef6-72c3-a61e-4a91c1ee96ff", "title": "Developing a mature endpoint-focused IT asset management program", "url": "https://redcanary.com/blog/security-operations/asset-management/", "published_at": "2024-01-04T16:05:50+00:00" }, { "id": "01a0dd95-9ef6-72c3-a61e-4a91c2e84631", "title": "Red Canary’s best of 2023", "url": "https://redcanary.com/blog/security-operations/best-of-2023/", "published_at": "2023-12-21T19:52:09+00:00" } ] posts Claim your blog

Back to Red Canary

Blog · corpus.blog/blogs/redcanary.com/posts

Red Canary

redcanary.com

2025

Getting started with Conditional Access: Comparing Entra ID Conditional Access with Cisco Duo Security original ↗

21 May 2025

Getting started with Conditional Access: Comparing Entra ID Conditional Access with Okta original ↗

14 May 2025

Getting started with Conditional Access: 5 must-have Entra ID policies original ↗

7 May 2025

Critical vulnerability in SAP NetWeaver enables malicious file uploads original ↗

30 Apr 2025

Intelligence Insights: April 2025 original ↗

24 Apr 2025

Cybersecurity metrics that matter (and how to measure them)original ↗

23 Apr 2025

Red Canary’s favorite cybersecurity podcasts original ↗

17 Apr 2025

Creating user baseline reports to identify malicious logins original ↗

10 Apr 2025

The RSAC 2025 Conference talks worth catching original ↗

3 Apr 2025

2025 Threat Detection Report: Practitioner playbook original ↗

27 Mar 2025

Intelligence Insights: March 2025 original ↗

20 Mar 2025

What does Google’s $32B acquisition of cloud security startup Wiz mean for security operations?original ↗

20 Mar 2025

Identity attacks and infostealers dominate the 2025 Threat Detection Report original ↗

18 Mar 2025

Red Canary named a Leader in MDR original ↗

6 Mar 2025

Dive into the Red Canary Security Data Lake original ↗

3 Mar 2025

Polishing Ruby on Rails with RSpec metadata original ↗

26 Feb 2025

Intelligence Insights: February 2025 original ↗

20 Feb 2025

Defying tunneling: A Wicked approach to detecting malicious network traffic original ↗

12 Feb 2025

CopyObjection: Fending off ransomware in AWS original ↗

4 Feb 2025

The unusual suspects: Effectively identifying threats via unusual behaviors original ↗

28 Jan 2025

Intelligence Insights: January 2025 original ↗

23 Jan 2025

Tangerine Turkey mines cryptocurrency in global campaign original ↗

23 Jan 2025

What we learned by integrating with Google Cloud Platform original ↗

21 Jan 2025

Incorporating AI agents into SOC workflows original ↗

16 Jan 2025

Shrinking the haystack: The six phases of cloud threat detection original ↗

8 Jan 2025

Shrinking the haystack: Building a cloud threat detection engine original ↗

8 Jan 2025

2024

Intelligence Insights: December 2024 original ↗

20 Dec 2024

Red Canary’s best of 2024 original ↗

18 Dec 2024

A defender’s guide to identity attacks original ↗

16 Dec 2024

Single sign-on, double trouble: Credential theft using AWS access tokens original ↗

12 Dec 2024

The three keys to threat hunting original ↗

11 Dec 2024

Red Canary: At the heart of your security operations original ↗

10 Dec 2024

The dark cloud around GCP service accounts original ↗

5 Dec 2024

Storm-1811 exploits RMM tools to drop Black Basta ransomware original ↗

2 Dec 2024

Safeguard your identities with Red Canary + CrowdStrike Falcon® Identity Protection original ↗

26 Nov 2024

Intelligence Insights: November 2024 original ↗

21 Nov 2024

Why CISOs under consolidation pressure are embracing Microsoft Security solutions original ↗

14 Nov 2024

Stealers evolve to bypass Google Chrome’s new app-bound encryption original ↗

13 Nov 2024

Explore the new Atomic Red Team website original ↗

13 Nov 2024

From the dreamhouse to the SOC: Ken’s guide to security original ↗

12 Nov 2024

Artificial authentication: Understanding and observing Azure OpenAI abuse original ↗

30 Oct 2024

Intelligence Insights: October 2024 original ↗

24 Oct 2024

Apple picking: Bobbing for Atomic Stealer & other macOS malware original ↗

10 Oct 2024

Infosec horoscopes: Astrology for SOC teams original ↗

3 Oct 2024

Intelligence Insights: September 2024 original ↗

26 Sept 2024

Keep track of AWS user activity with SourceIdentity attribute original ↗

24 Sept 2024

Trending cyberthreats and techniques from the first half of 2024 original ↗

19 Sept 2024

The CrowdStrike outage: Detection and defense in depth original ↗

12 Sept 2024

Detecting brute-force attacks with a smart watchlist original ↗

10 Sept 2024

Reel in troves of data with webhooks original ↗

29 Aug 2024

Recent dllFake activity shares code with SecondEye original ↗

26 Aug 2024

Intelligence Insights: August 2024 original ↗

22 Aug 2024

A defender’s guide to crypters and loaders original ↗

5 Aug 2024

Certified evil: Investigating signed malicious binaries original ↗

31 Jul 2024

5 lessons for entry-level software engineers original ↗

31 Jul 2024

Intelligence Insights: July 2024 original ↗

25 Jul 2024

How Red Canary works to create an accessible coding environment for all original ↗

17 Jul 2024

Halting a hospital ransomware attack original ↗

8 Jul 2024

Navigating the cloud security landscape original ↗

27 Jun 2024

Scarlet Goldfinch: Taking flight with NetSupport Manager original ↗

26 Jun 2024

Intelligence Insights: June 2024 original ↗

20 Jun 2024

The unsung security benefits of cloud migration original ↗

13 Jun 2024

The role of GenAI in Red Canary’s security evolution original ↗

10 Jun 2024

What to consider when evaluating EDR original ↗

3 Jun 2024

Open with Notepad: Protecting users from malicious JavaScript original ↗

31 May 2024

Accelerating identity threat detection and response with GenAI original ↗

30 May 2024

How cloud architects and detection engineers can work together original ↗

29 May 2024

Intelligence Insights: May 2024 original ↗

23 May 2024

Engineering a MDR solution for Microsoft Azure original ↗

22 May 2024

Red Canary coverage of Google Cloud Platform enters general availability original ↗

21 May 2024

How adversaries use Entra ID service principals in business email compromise schemes original ↗

16 May 2024

MSIX and other tricks: How to detect malicious installer packages original ↗

9 May 2024

The detection engineer’s guide to Linux original ↗

2 May 2024

The benefits of GenAI by SOC function original ↗

30 Apr 2024

Manage your SOC like a product original ↗

25 Apr 2024

The RSA Conference talks we’re looking forward to most original ↗

24 Apr 2024

Intelligence Insights: April 2024 original ↗

18 Apr 2024

Translating our detection engine: A journey from JRuby to Go original ↗

10 Apr 2024

Holding down the Fortinet vulnerability original ↗

8 Apr 2024

The Trainman’s Guide to overlooked entry points in Microsoft Azure original ↗

3 Apr 2024

Teaming with Microsoft Copilot for Security original ↗

1 Apr 2024

Best practices for securing Azure Active Directory original ↗

28 Mar 2024

Coming to a city near you, it’s Red Canary Live!original ↗

25 Mar 2024

Intelligence Insights: March 2024 original ↗

21 Mar 2024

The rise of Charcoal Stork original ↗

18 Mar 2024

Inside the 2024 Threat Detection Report original ↗

13 Mar 2024

Introducing Red Canary’s multicloud launch original ↗

5 Mar 2024

Red Canary brings MDR expertise to Microsoft Azure Cloud original ↗

5 Mar 2024

Better know a data source: Files original ↗

4 Mar 2024

Strengthen your Core with NIST’s updated cybersecurity framework original ↗

28 Feb 2024

Using GenAI to improve security operations original ↗

27 Feb 2024

Intelligence Insights: February 2024 original ↗

22 Feb 2024

Why adversaries have their heads in the cloud original ↗

31 Jan 2024

Intelligence Insights: January 2024 original ↗

25 Jan 2024

Mastering Kubernetes security: Safeguarding your container kingdom original ↗

18 Jan 2024

Misbehaving binaries: How to detect LOLBin abuse in the wild original ↗

16 Jan 2024

MSIX installer malware delivery on the rise across multiple campaigns original ↗

12 Jan 2024

Emu-lation: Validating detections for SocGholish with Atomic Red Team original ↗

9 Jan 2024

Developing a mature endpoint-focused IT asset management program original ↗

4 Jan 2024

2023

Red Canary’s best of 2023 original ↗

21 Dec 2023