3 ms·
This article barely explains anything about the "Kill Chain" which to me sounds like part firewall, part network monitoring software and part credit card fraud
by DigitalSea 14y ago
This article barely explains anything about the "Kill Chain" which to me sounds like part firewall, part network monitoring software and part credit card fraud detection algorithm. From what I know and took from the article, the "Kill Chain" is nothing more than a software perhaps even hardware layer that can detect suspicious activity and throw up restrictions without actually alerting the user they're detected but rather make them leave out of frustration once they work out they're not getting anything.
One part of the article in which they reveal that the system can detect attackers using legitimate authentication details basically only when they are trying to access data that they're not entitled too makes me wonder if an attacker were to get the credentials of someone higher up with more access to a wider set of data than a regular employee, would they be able to detect that? Seems like the chink in the armour if you ask me.
Interesting, but I would have loved a bit more detail and explanation about this heavily over-glorified firewall and humanised monitoring network.