Sekoia Blogs
SIGMA, design and MITRE ATT&CK: The new features of the XDR and CTI platform
Discover in this article, all the news features of Sekoia XDR and CTI platform (SIGMA, design and MITRE ATT&CK).
Walking on APT31 infrastructure footprints
APT31 is an Advanced Persistent Threat group whose mission is likely to gather intelligence on behalf of the Chinese government.
Centralization of EDR alerts, new detections and trackers… What's new in November 2021
Our platform continues to reinvent itself and evolve by regularly integrating new features while improving existing features.
Detail of an alert, observable database, new exclusive source… What's new in October 2021
In this article, you will discover all the new features, plus improved existing features, within the Sekoia platform.
An insider insight into Conti operations – Part Two
This is the second part of our blog post about Conti, here we'll see how to detect Conti Operations techniques and much more.
An insider insight into Conti operations - Part One
In part 1, we focus on the Conti ransomware group whose training material was recently leaked on a cybercrime forum.
Ideation process at Sekoia
To remain ahead of the curve, we use an ideation process that allows us to shape our next features. Read and discover our ideation process.
Playbooks, YARA rules, IoCs… Everything you need to know
Learn about new and existing features that have seen improvements on our XDR platform. You will find playbooks and new detection rules there.
XDR is not EDR
XDR stands for eXtended Detection and Response, not for eXtended Endpoint Detection and Response. Discover our point of view about XDR.
Hatching Triage to enhance Sekoia Cyber Threat Intelligence
We present the integration of Indicators of Compromise in our CTI from the results of Hatching’s Triage sandbox analysis.
New Sekoia features in July 2021
Discover how the SEKOIA.IO platform continues to reinvent itself and evolve by integrating new features (Tracking of Chinese APT groups)
TAXII 2.1 is out: Pagination improvements
In this article, we are going to talk about the main issue we found in TAXII 2.0: the pagination.
Enrich Your Graylog with Sekoia
This article shows a simple solution to use the CTI of Sekoia to enrich a log management infrastructure operated with Graylog.
Hunting and detecting Cobalt Strike
In this blog post, we describe step by step how to ensure a proactive and defensive posture against Cobalt Strike.
Augmented SOC: How to rethink your security center?
Help your SOC to evolve. Learn about the limits of traditional SOCs and how you can rethink your security center.
Moving your security to the cloud?
Cloud security is a hot topic, but should you fall for it ? Discover the benefits of SIEM, SOAR, SOC and TIP tools in the cloud.
Cybersecurity skills shortage: 4 pieces of advice to handle it
Cybersecurity skills shortage is a hard to deal with. Learn how to face it in 4 steps, including automation and cloud-security solutions.
How to reduce cyber risks through automation
This article shows how automation can reduce cybersecurity risks. Read and discover how you can reduce cyber risks.
How we made deployments safer at Sekoia
This article shows how we made deployments safer at Sekoia. Have a read and see how we made it happen.
Threat Detection & Research team
Sekoia Threat Detection & Research team, commonly known as the TDR team, is the driving force behind the Sekoia SOC platform, delivering exclusive threat intelligence.
