October 15th, 2019 - 11:09 GMT
In the first half of 2019, only a handful (1,26%) of Indicators of Attack (IoA) alerts on device endpoints were identified as cybersecurity incidents, according to Kaspersky’s Managed Detection and Response Analytics Report. Of the 40,806 alerts generated via IoAs, only 515 resulted in detected incidents. Yet, most of those incidents were related to sophisticated targeted attacks that use so-called “living off the land” techniques, deployed by threat actors to hide malicious activity within legitimate user and administrator behavior. Unlike Indicators of Compromise (IoC)-based detection methods, IoAs allow attack identification ...
