Your attack surface isn't just your network. It runs through identity, endpoints, applications, cloud, data…
Esla K. — CyberOps Community Lead
Your attack surface isn't just your network.
It runs through identity, endpoints, applications, cloud, data, and the third parties that touch any of them.
"What assets do we have?" is the easy question, and most teams can answer it with a spreadsheet. The harder one is how those assets connect, who can reach them, and what happens to the rest when one gets compromised.
That second question is where detection work starts. If you can't see the paths between systems, you can't write good detections for them, and you'll spend the first hour of every investigation just working out what the compromised account could touch.
#Cybersecurity #AttackSurface #SecurityOperations #DetectionEngineering #NcryptoEdge
3 reactions · 0 comments
Topics: #attacksurface, #ncryptoedge, #securityoperations, #cybersecurity, #detectionengineering