Catch ‘em Deletes – Increasing Visibility, Not the cost

Cyber Adversaries, or malware authors, are motivated to remove the traces of the malware’s execution for a variety of reasons including evading “Defense Mechanisms”, as well as ensuring the malware researchers cant access the malicious files easily. MITRE ATT&CK Matrix categorizes tactics for such “Defense Mechanisms” under techniques for “Indicator Removal on Host” with various sub-techniques, one of them being “File Deletion”

One of the critical elements of an effective Cyber Security strategy is ‘breadth of visibility’. Needless …

corporate cost edr osquery product visibility xdr