ThreatDefence

21/04/2024

Our team had an incredible day at last Friday. It was so good to engage with Brisbane's awesome cyber security community and catch up with all our friends, partners, and everyone else who came to our stand!

18/04/2024

For many teams, their first serious incident response turns into a complete disaster.

Familiar tools, thought to be reliable, fail to detect the compromise. Log data is deleted by threat actors, and the incident response plan does little more than convene everyone on a call and engage an external forensics team, which often has limited knowledge of the environment.

How can teams better prepare for such situations when the stakes are high and external help is limited?

Our Cyber Range platform is specifically designed to put trainees in these challenging scenarios. Whether facing an advanced adversary or an opportunistic ransomware operator, hands-on incident response and crisis management experience is what will make the difference between disaster and success.

17/04/2024

Is SecOps AI just another buzzword, or can it be useful to defenders?

At ThreatDefence, we find it very useful for our SOC team.AI helps solve alert fatigue—it can prioritize what is important and what is not.

While it does not always (yet?) accurately identify true positives, it is very effective at detecting false positives and flagging items that require immediate human review.

Now, at ThreatDefence SOC, AI handles most routine tasks at a scale, allowing analysts to focus on what is truly important.

We've already seen a 60% reduction in workload, while the quality of detection has also increased.

12/04/2024

BRISSEC - Brisbane's Premier Cyber Security Conference - is just a week away!

Come meet our team at Stand #21 - we’ll be talking about Security Operations and Incident Response, and sharing insights on how organisations can enhance their SecOps capabilities with our Australian-made, award-winning cyber security platform.

Providing a place to network and grow.

10/04/2024

We are excited to announce that ThreatDefence has partnered with Federation University Australia to make a joint submission to the Australian Cyber Security Legislative Reforms Consultation Paper.

In our submission, we shared our feedback on several critical areas: the proposed ransomware reporting obligations for businesses, threat intelligence sharing, and regulations governing post-incident reviews.

Many thanks to Federation University Australia and Dr Muhammad Imran for your invaluable insights and collaboration. This partnership underscores our commitment to shaping a resilient cyber security framework for Australia.

Together, we're contributing to a safer digital future.

https://www.homeaffairs.gov.au/help-and-support/how-to-engage-us/consultations/cyber-security-legislative-reforms

Home Affairs brings together Australia's federal law enforcement, national and transport security, criminal justice, emergency management, multicultural affairs, settlement services and immigration and border-related functions, working together to keep Australia safe.

03/04/2024

Stats from our AI SecOps assistant.

The assistant confidently closes 60-80% of the alerts. For O365 alerts, which represent more predictable human behaviour, the auto-closure rate is over 98%. AI completing 70% of the SecOps workload across all data sources enhances productivity without compromising quality or discipline.

If the AI assistant is confident, it may escalate directly to the customer; otherwise, it will reassign the alert to a human analyst and follow up with an email if there is no response.

29/03/2024

ThreatDefence is proud to sponsor AISA BRISSEC on Friday, April 19, 2024.

ThreatDefence empowers organisations to build their own SecOps in a day and see a security overview on a single pane of glass.

20/04/2023

ThreatDefence provides innovative Security Operations and cyber defense solutions to MSPs and Enterprises. Our SecOps Platform is designed to assist businesses of all sizes in implementing world-class detection and response, utilizing all available data sources, whether it be within their network, on the Dark Web, or concealed deep within their supply chain. We value open ecosystems and seamlessly integrate with any and all threat intelligence feeds and log sources, delivering immediate actionable security insights.