{"id":2667,"date":"2019-06-26T16:08:39","date_gmt":"2019-06-26T20:08:39","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=2667"},"modified":"2019-06-26T16:23:30","modified_gmt":"2019-06-26T20:23:30","slug":"6-digital-threats-to-watch-out-for-with-security-monitoring","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/","title":{"rendered":"6 Digital Threats to Watch Out For With Security Monitoring"},"content":{"rendered":"

\"6<\/p>\n

Security monitoring can help your IT security team find threats hiding in plain sight among your legitimate network activity. In fact, you can even automate your security monitoring to alert you when it recognizes a threat without direct threat hunting required.\u00a0<\/span><\/p>\n

However, do you know what to look for with your security monitoring? What threats require constant vigilance? Importantly, what constitutes the tale-tell signs on these digital threats?\u00a0<\/span><\/p>\n

With help from AT&T Cybersecurity, who offer insights for security monitoring in <\/span>Office 365<\/span><\/a> and <\/span>Amazon Web Services<\/span><\/a>, we share the top 6 threats!\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n

1. Platform Misconfiguration<\/b><\/h3>\n

No one can overstress the dangers of platform misconfiguration. Indeed, platform misconfiguration represents one of the most consistent dangers for enterprises of any size on the cloud.\u00a0<\/span><\/p>\n

For those unaware, platform misconfiguration<\/a> occurs in hybrid or cloud environments. In these cases, the configurations of the storage or computation of the cloud server instances leave them vulnerable to breaches.\u00a0<\/span><\/p>\n

A classic example: if any user can access your AWS S3 bucket from their browser, that demonstrates Platform Misconfiguration. Unfortunately, this problem remains ubiquitous among enterprises undergoing cloud migration.\u00a0<\/span><\/p>\n

Your security monitoring should look for any sign of misconfiguration, either on the cloud itself or by examining its access parameters.\u00a0<\/span><\/p>\n

Speaking of which\u2026<\/span><\/p>\n

2. Unauthorized Access<\/b><\/h3>\n

With unauthorized access, <\/span>SIEM<\/span><\/a>, security monitoring, and identity management collaborate to help keep your business secure. Above all, remember this: it doesn\u2019t matter what kind of security protocols you have in place if a hacker has stolen credentials. If you don\u2019t watch for unauthorized access or stolen credentials, hackers win every time.\u00a0\u00a0<\/span><\/p>\n

Moreover, stolen credentials and unauthorized access can end up creating more lasting and more devastating damage long term. It could lead to financial theft, intellectual property theft, and even network destruction,\u00a0<\/span><\/p>\n

Therefore, your security monitoring should look for unauthorized access. In particular, it should look for multiple failed login attempts, unusual access request times or locations, and unusual behaviors when logged in.\u00a0\u00a0\u00a0<\/span><\/p>\n

3. Insecure APIs\u00a0<\/b><\/h3>\n

Fundamentally, APIs allow for automated data transfers and usage among disparate services. In a cloud environment, APIs help with digital scalability and efficiency over cloud and hybrid environments.\u00a0<\/span><\/p>\n

However, APIs can suffer the same issue faced by S3 buckets: misconfigurations. Specifically, a misconfigured API can result in data traffic moving to more vulnerable network areas, to unauthorized users, or into hackers\u2019 hands.\u00a0<\/span><\/p>\n

Thus your security monitoring solution should look for any discrepancy in data traffic result from APIs. Additionally, it should look for any user changing the configuration rules of your APIs; anyone doing so without permission poses a threat to your organization.\u00a0\u00a0<\/span><\/p>\n

4. Dangerous Administrator Actions<\/b><\/h3>\n

Of course, any privileged users\u2019 activities should receive strict security monitoring at all times. No exceptions. Any discrepancies in behaviors or in access requests should trigger security protocols to ensure the users\u2019 authenticity and good intentions.\u00a0<\/span><\/p>\n

Privileged users\u2019 accounts can do far more than regular users’. They can completely change your business processes, access proprietary information, and potentially steal your finances from you without your legacy solutions noticing. Imagine what a hacker or insider threat could do with this power.\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

As such, your security monitoring should look for any privilege escalation attempts, role changes, and access rights alterations; these constitute serious red flags. Also, your security monitoring should alert you if it detects new user creations, repeated user deletions, and configuration changes.\u00a0<\/span><\/p>\n

In particular, notice how configuration changes continue to reemerge as a major warning sign of threats.\u00a0\u00a0\u00a0<\/span><\/p>\n

5. File Access and Sharing\u00a0 <\/b><\/h3>\n

File sharing doesn\u2019t just occur through APIs. They occur through everyday business processes and there are so many most people couldn\u2019t keep track of them all. However, your security monitoring solution must. Imagine how easily hackers could interrupt or disrupt your file sharing protocols; they could obtain sensitive assets with relatively little effort.\u00a0\u00a0<\/span><\/p>\n

Therefore, your security monitoring solution should keep a lookout for major or minor policy changes to your infrastructure or network components. Also, it should watch for changes in user access to files, deleted files, as well as any configuration changes.\u00a0<\/span><\/p>\n

6. Malicious Actors or Malware<\/b><\/h3>\n

As we come to the end of our list, we have to acknowledge an oft-neglected truth in modern cybersecurity. Sometimes, the thing you need to look out for is, in fact, the obvious villain.<\/span><\/p>\n

Absolutely access based attacks continue to rise. However, traditional malware such as ransomware continues to see employment. Additionally, less traditional digital threats like fileless malware are enjoying an increase in popularity. Finally, known bad actors still use old school communication techniques to exploit business networks.\u00a0\u00a0<\/span><\/p>\n

Your enterprise\u2019s security monitoring should keep an eye out for the signs of known bad actors and send immediate alerts if it discovers any evidence. Of course, this may seem simple. Yet the simplest things often end up the most neglected.\u00a0<\/span><\/p>\n

<\/div>\n

Thanks to the AT&T Cybersecurity whitepapers on <\/span>Office 365<\/span><\/a> and <\/span>AWS<\/span><\/a> security monitoring for helping with this article. If you would like to learn more, see our own resources on SIEM: the <\/span>Buyer\u2019s Guide<\/span><\/a> and <\/span>Vendor Map<\/span><\/a>!\u00a0<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

Security monitoring can help your IT security team find threats hiding in plain sight among your legitimate network activity. In fact, you can even automate your security monitoring to alert you when it recognizes a threat without direct threat hunting required.\u00a0 However, do you know what to look for with your security monitoring? What threats […]<\/p>\n","protected":false},"author":41,"featured_media":2445,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[175,1019,353,95,86,21,57,352,22],"acf":[],"yoast_head":"\n6 Digital Threats to Watch Out For With Security Monitoring<\/title>\n<meta name=\"description\" content=\"Security monitoring can help your IT security team find threats hiding in plain sight among your legitimate network activity.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"6 Digital Threats to Watch Out For With Security Monitoring\" \/>\n<meta property=\"og:description\" content=\"Security monitoring can help your IT security team find threats hiding in plain sight among your legitimate network activity.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2019-06-26T20:08:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-06-26T20:23:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"433\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/\",\"name\":\"6 Digital Threats to Watch Out For With Security Monitoring\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\",\"datePublished\":\"2019-06-26T20:08:39+00:00\",\"dateModified\":\"2019-06-26T20:23:30+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Security monitoring can help your IT security team find threats hiding in plain sight among your legitimate network activity.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\",\"width\":800,\"height\":433,\"caption\":\"Predictions: The Top SIEM Threats of 2021 (And How to Prevent Them)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"6 Digital Threats to Watch Out For With Security Monitoring\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"6 Digital Threats to Watch Out For With Security Monitoring","description":"Security monitoring can help your IT security team find threats hiding in plain sight among your legitimate network activity.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/","og_locale":"en_US","og_type":"article","og_title":"6 Digital Threats to Watch Out For With Security Monitoring","og_description":"Security monitoring can help your IT security team find threats hiding in plain sight among your legitimate network activity.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2019-06-26T20:08:39+00:00","article_modified_time":"2019-06-26T20:23:30+00:00","og_image":[{"width":800,"height":433,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/","name":"6 Digital Threats to Watch Out For With Security Monitoring","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","datePublished":"2019-06-26T20:08:39+00:00","dateModified":"2019-06-26T20:23:30+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Security monitoring can help your IT security team find threats hiding in plain sight among your legitimate network activity.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","width":800,"height":433,"caption":"Predictions: The Top SIEM Threats of 2021 (And How to Prevent Them)"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/6-digital-threats-to-watch-out-for-with-security-monitoring\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"6 Digital Threats to Watch Out For With Security Monitoring"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/2667"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=2667"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/2667\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2445"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=2667"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=2667"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=2667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}