6 ms·
Proper audit logs that are regularly checked.
by bdibs 7y ago
Proper audit logs that are regularly checked.
- drb91 7y agoAssuming the exfiltration can be differentiated from normal behavior!
- auiya 7y agoSeeing large amounts of encrypted traffic leaving via a DNS tunnel during non-standard business hours for instance would be an example of such an anomaly. It's not always that easy to detect however.
- mirimir 7y agoDidn't Sony pick up exfiltration through exceptional data flows?
- IncRnd 7y agoSony was hacked 19 times in two weeks. There was a lot they didn't pick up on due to the difficulties involved with that.