SOC Experts Community - Beta
0 like 0 dislike
in General Questions by (4.1k points)
The world has recently been hit by Attack/virus etc. What have you done to protect your organization as a security professional?

3 Answers

0 like 0 dislike
by (5k points)
As a security analyst ill read that article and based on that ill update the dat file and ill suggest patches for vulnerability.
1 like 0 dislike
by (1.2k points)
Check if the AV vendor has released a signature or emergency signature for the new malware. Ensure all the systems have this new signature. Run regular reports to make sure 100% of systems and servers are compliant.

Identify the IOCs (File hashes, URLs and mail address involved, IPs). Use these IOCs in all possible devices (Firewall, Proxy, internal TI, etc)

Feed the IOCs in to SIEM and configure rules to trigger if any of the IOCs appear in your network.

Research on the malware and see if it is targeted to a specific vertical or region.
1 like 0 dislike
as a security professional and also as the end user of the organization who will be exposed to the external threats, first i will do the security updates in my system and stop being an amateur by clicking every unrelated mails/spam mails and pop ups and monitor IOC's in my system and evaluate and report them.

SOC Experts - No. 1 Job Oriented Cybersecurity Training Program

View our Courses