A beam of light showing a piece of machinery with interlocking wires.

August 24, 2026

SOC Insights & Other News

Product News

What you need to know before putting AI agents in your production SOC

A convincing demo doesn’t prove production readiness. Learn how to test an AI agent before it takes on live SOC investigations.

David Greenwood

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Latest blogs

Threat Research & Intelligence

TDR Team

April 30, 2024

Guarding Democracy: Assessing Cyber Threats to 2024 Worldwide Elections

Sekoia TDR analysts conduct an assessment of threats regarding the major elections that will occur in 2024.

TDR Team

Coline CHAVANE

Maxime ARQUILLIERE

Livia TIBIRNA

Threat Research & Intelligence

TDR Team

April 25, 2024

Unplugging PlugX: Sinkholing the PlugX USB worm botnet

Learn about our process for collecting telemetry data from PlugX worm-infected workstations, as well as how to disinfect them.

TDR Team

Félix AIME

Charles Meslay

Product News

Threat Research & Intelligence

Cloud

April 22, 2024

Securing cloud perimeters

Sekoa helps companies to protect their cloud perimeters (AWS, Google Cloud, Azure). Enhance your cloud security with our in-built rules.

Sekoia Team

Threat Research & Intelligence

Detection Engineering

TDR Team

April 18, 2024

AWS Detection Engineering: A Guide for Defenders

A broad introduction to AWS logs sources and relevant events for detection engineering.

TDR Team

Guillaume COUCHARD

Erwan CHEVALIER

Threat Research & Intelligence

Cloud

April 5, 2024

From EDR to XDR: Detailed Walkthrough

Understand how EDR and XDR differ, where they overlap, and how MDR, MXDR & NDR fit in. A clear guide to choosing the right solution.

Sekoia Team

Threat Research & Intelligence

TDR Team

Cybercrime

March 25, 2024

Tycoon 2FA: an in-depth analysis of the latest version of the AiTM phishing kit

Tycoon 2FA has become one of the most widespread AiTM phishing kits over the last few months.

TDR Team

Quentin Bourgue

Hand of God by Michelangelo artwork adaptation

Threat Research & Intelligence

March 25, 2024

Sekoia and GLIMPS: A new example of interoperability within the Open XDR platform

Learn how Sekoia and GLIMPS are working together to provide a rapid and coordinated response to sophisticated cyberattacks.

Sekoia Team

Threat Research & Intelligence

TDR Team

March 14, 2024

Unveiling the depths of Residential Proxies providers

Discover the growing threat of residential proxies, their role in hiding among legitimate traffic and the challenges they pose in cyberspace.

TDR Team

Amaury-Jacques GARÇON

Livia TIBIRNA

Grégoire CLERMONT

Product News

Threat Research & Intelligence

March 13, 2024

Enhancing cybersecurity with Accurate IOC detection

At Sekoia, accurate IOC detection plays a vital role: Sekoia’s intelligence is based on more than 400 sources and more than 8 million of IOCs

Sekoia Team

Product News

Threat Research & Intelligence

March 7, 2024

Guidelines for selecting and disseminating Sekoia IOCs from CTI sources

Sekoia offers a cutting-edge Cyber Threat Intelligence (CTI) platform. With over 400 sources and 8 million indicators of compromise (IOC), Sekoia's experienced team delivers comprehensive cyber threat intelligence.

Julien DE PINS

Illustration of a key over a fortified wall against a circuit board background

Threat Research & Intelligence

TDR Team

March 7, 2024

The Architects of Evasion: a Crypters Threat Landscape

In this report, we introduce key concepts and analyse the different crypter-related activities and the lucrative ecosystem of threat groups leveraging them in malicious campaigns.

TDR Team

Livia TIBIRNA

Threat Research & Intelligence

TDR Team

March 1, 2024

NoName057(16)'s DDoSia project: 2024 updates and behavioural shifts

Learn about NoName057(16), a pro-Russian hacktivist group behind Project DDoSia targeting entities supporting Ukraine. Discover an overview of the changes made by the group, both from the perspective of the software shared by the group to generate DD

TDR Team

Amaury-Jacques GARÇON

Maxime ARQUILLIERE

Threat Research & Intelligence

TDR Team

February 28, 2024

The Predator spyware ecosystem is not dead: Intellexa's active C2 infrastructure and targeted countries

Discover our TDR team's revelations about Predator spyware: its C2 infrastructure and list of countries still using its cyber espionage tool.

TDR Team

Félix AIME

Maxime ARQUILLIERE

Product News

Threat Research & Intelligence

Cloud

February 22, 2024

Playbooks on-prem

Playbooks on-prem may appeal to companies seeking to synchronize cloud actions with those executed on-premises.

Sekoia Team

Threat Research & Intelligence

TDR Team

Cybercrime

February 22, 2024

Scattered Spider (aka UNC3944, Octo Tempest, Muddled Libra) Laying New Eggs

This report provides an overview of the Scattered Spider evolution, its modus operandi and the toolset leveraged over the past years. Additionally, it delves into the Scattered Spider TTPs, as well as the latest ongoing campaigns.

Pierre-Antoine DUCHANGE

Quentin Bourgue

Livia TIBIRNA

TDR Team

Product News

Threat Research & Intelligence

February 14, 2024

How the Sekoia Endpoint Agent works

Explore how Endpoint Agent differs from EDR and collects events to forward logs to Sekoia XDR for in-depth analysis against detection rules.

Sekoia Team

Threat Detection & Research team

Sekoia Threat Detection & Research team, commonly known as the TDR team, is the driving force behind the Sekoia SOC platform, delivering exclusive threat intelligence.

Meet TDR team

Read latest TDR articles

All categories

Detection Engineering

Product News

SOC Insights & Other News

Threat Research & Intelligence