Blog

March 6, 2024

What is TDIR (Threat Detection Investigation and Response)?

SOC Security Analytics

This detailed blog breaks down what Threat Detection Investigation and Response (TDIR) is, why it is needed, the challenges of implementing TDIR and tips for a successful program.

Read More

March 1, 2024

GO Stealer Malware Targeting Indian Air force – Cyber Espionage Campaign

Threat Research

In the ever-evolving landscape of cyber threats, a recent incident caught the attention of security experts and government agencies alike. Unidentified cyber attackers attempted to breach the internal computer systems of the Indian Air Force (IAF), aiming to steal sensitive…

Read More

February 15, 2024

Ultimate Guide to Identity Threat Detection and Response (ITDR)

SOC Insider Threat Security Analytics

Learn the fundamentals of what Identity Threat Detection and Response (ITDR) is, why it’s necessary and how to select the right ITDR solution.

Read More

February 14, 2024

Why Gurucul Is an Overall Leader in the 2024 KuppingerCole Leadership Compass for Intelligent SIEM

Learn why Gurucul was named an overall leader for intelligent SIEM in the 2024 KuppingerCole I-SIEM Leadership Compass.

Read More

February 2, 2024

DarkGate Malware

Threat Research

DarkGate is a complete toolkit that provides attackers with extensive capabilities to fully compromise victim systems. Darkgate is loader/botnet malware. DarkGate malware has been out there since 2017. Infection Chain: The analysis mentioned in our report is based on the…

Read More

January 24, 2024

Gurucul Threat Research: Androxgh0st Malware

Threat Research

AndroxGh0st is a “SMTP cracker” which is primarily intended to scan for and parse Laravel application secrets from exposed .env files. (Note: Laravel is an open source PHP framework and the Laravel .env file is often targeted for…

Read More

January 9, 2024

SIEM Replacement or SIEM Augmentation? How About Both!

SOC Security Analytics

Discover the benefits of SIEM augmentation and SIEM replacement. Learn how to improve threat detection and security operations for a modern security strategy.

Read More

January 5, 2024

Understanding Your SIEM Options

SOC Security Analytics

The SIEM market provides a lot of options today. Learn how to differentiate SIEM solutions and how to select the right SIEM tool.

Read More

January 3, 2024

Combating Identity-Based Cyber Threats with an Identity-Centric Next-Gen SIEM

SOC Insider Threat Security Analytics

Protect your organization from identity-based attacks with Next-Gen SIEM equipped with Identity Threat Detection and Response (ITDR) capabilities.

Read More

December 23, 2023

Five Ways to Improve Threat Detection Investigation & Response (TDIR) with a Next-Gen SIEM

SOC Security Analytics

Discover key themes and strategies to enhance your cybersecurity approach with Threat Detection Investigation and Response...

Read More

December 14, 2023

UEBA Tools: Your Guide to Behavioral Based Security‍ Analytics

SOC Insider Threat Security Analytics

Learn about the capabilities of UEBA tools, how to choose the right UEBA tool for your organization, and the top 5 UEBA tool use cases.

Read More

December 12, 2023

Zero Trust Matures, Insider Threat Programs Take Off, and AI Doesn’t Change Things as Much as You’d Think Just Yet: Gurucul’s 2024 Cybersecurity Predictions

Threat Research SOC Security Analytics

At Gurucul, we’re experts in security analytics, machine learning/AI, and applied data science with many decades of combined experience in cybersecurity, working to enable Security Operations Center people, processes and tools. We’re always trying to stay on the…

Read More

Advanced cyber security analytics platform visualizing real-time threat intelligence, network vulnerabilities, and data breach prevention metrics on an interactive dashboard for proactive risk management and incident response