With more organizations going to the cloud, with shadow IT, and with GDPR requirements cloud visibility seems to be the latest fad....
Microsoft & Amazon picked up on this several years ago, thus Azure Info Protection (AIP) and AWS Macie but, that does not cover them together or Google / Salesforce / Rackpsace.
So, expect this area to gain traction for several more years...
Monday, June 25, 2018
Saturday, June 23, 2018
Incident Response v.2.0: Partner Office 365 (O365) Compromise
As more ecosystems move to Microsoft's Office 365 it seems necessary to create an IR playbook for O365 compromises.
Said playbook should include proper responses.
Tasks to perform should include:
Said playbook should include proper responses.
Tasks to perform should include:
- Disabling established trusts
- Quarantining emails / messages
- Establishing enhanced security policies / black lists
- Calibrating monitoring / notification rules
Subscribe to:
Posts (Atom)