Threat video1:00
ProjectDiscovery Unverified Vulns Survey: Detection & IOCs
A ProjectDiscovery survey finds nearly half of large teams close unverified findings. Get 9 detection rules, 13 IOCs and a free Splunk SPL rule.
Read the full threat intel for ProjectDiscovery Unverified Vulns Survey: Detection & IOCs →
Chapters
- 0:00The hook3-in-4 teams report a growing backlog.
- 0:04The storyNearly half close findings unverified.
- 0:12Attack pathThe survey reported findings flow in from many sources.
- 0:27AttributionNo threat actor is attributed.
- 0:32Indicators of compromise2 indicators to hunt: 2 URLs.
- 0:38MITRE ATT&CK techniques5 ATT&CK techniques, from reconnaissance to initial access.
- 0:42Remediation2 steps now: Prioritize triage of findings on internet-facing assets and anything.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:003-in-4 teams report a growing backlog.
0:05Nearly half close findings unverified.
0:07Over half expect attackers to reach backlog first.
0:12The survey reported findings flow in from many sources.
0:16Nearly half close unverified findings, citing lack of time.
0:20Mandiant shows exploitation at or before patch availability.
0:28No threat actor is attributed. Confidence: low.
0:322 indicators to hunt: 2 URLs.
0:385 ATT&CK techniques, from reconnaissance to initial access.
0:432 steps now: Prioritize triage of findings on internet-facing assets and anything.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.