As with everything that you might find online, it is necessary to verify the information you have. The same goes for Cybersecurity-related information. To ensure the correctness of findings you should cross-check them with other tools/services available to you.
In this Hacks Weekly episode, we will focus on analyzing malware inside the AnyRun cloud software.
AnyRun is an interactive online malware analysis sandbox. You can detonate here any potential malware and analyze what it contains, what actions it performs, what files it modifies and for example, what HTTP request could be sent. AnyRun is a widely used analytic tool, as researchers can simulate and test potentially malicious files.
Welcome to another episode of CQURE Hacks Weekly – Investigating Risky Events Azure AD. This time we’re going to discuss how Azure AD Identity Protection is used to detect, analyze and investigate risky events related to user identities. You’ll learn how to configure User and Sign-in risk policies in Azure Portal, and how to use conditional access to specify cloud apps, user groups, and security requirements.
We will also find out why is it important to use log data to detect risky sign-ins from locations not defined in conditional access or from the Tor network, and to protect against external threats that may attempt to gain unauthorized access to company accounts.