SOARing to New Heights with DNS

SOC and threat hunting teams find themselves in a rapidly evolving landscape where identifying adversary domain and infrastructure TTPs can be critical to stay ahead of attacks. Relying on manual processes can only get you so far before your team becomes inundated with so much noise that the bigger picture is lost. Manually parsing through that much data hinders prioritisation of what’s most important and correlating relevant data points in a campaign becomes challenging. The good news is that there are ways to increase your speed of analysis using security orchestration automation response (SOAR) platforms to help manage and better understand alerts encountered on a daily basis. Join DomainTools and ISC(2) on 9 February at 1:00 p.m. GMT to discuss how to separate signal from noise and to automate complex actions and investigations with world class domain and DNS data.