IBM X-Force Releases Detection and Response Framework for Managed File Transfers
IBM’s Security X-Force has announced a common framework for detection and response for managed file transfers (MFTs) in an effort to prevent mass exploitations.
The framework, available on GitHub, includes the following components.
- MFTData — Details the key software components of MFT solutions.
- MFTDetect — Scripts that leverage the MFTData to automatically generate detections.
- MFTRespond — Scripts and tools that can aid in responding to incidents involving a MFT server.
- MFTPlaybook — MFT incident response playbook template that can be used as a starting point for incident responders.
The framework also includes “a sample of 13 different detection and response frameworks for the most common and exposed MFT solutions that we analyzed,” says John Dwyer in the announcement.
“This effort is meant to offload some of these learnings from defenders, to not only significantly reduce time required for defenders to stop an attack, but to also help prevent future mass exploitation.”
Related content
-
News for Admins
In the news: US Agencies Issue Quantum-Readiness Recommendations; Bitwarden Secrets Manager; IBM X-Force Releases Detection and Response Framework for Managed File Transfers; National Strategy to Expand US Cyber Workforce; SEC Adopts New Rules for Disclosure of Cybersecurity Incidents; Canonical Announces Real-Time Ubuntu for Intel Core; EU-US Data Privacy Framework Ensures Safe Data Transfers; IEEE Releases New Standard for LiFi Communications; EU Health Sector Security Risks; and JupyterLab 4.0.
-
Security risks from insufficient logging and monitoring
Although inadequate logging and monitoring cannot generally be exploited for attacks, it nevertheless significantly affects the level of security. -
Open source forensics for adaptive detection of threats on CRITIS networks
The open source tool Velociraptor is at the heart of a solution that automatically detects cyber threats in industrial environments, offering a defensive strategy and protecting critical infrastructures. -
Detecting security threats with Apache Spot
Security vulnerabilities often remain unknown when the data they reveal is buried in the depths of logfiles. Apache Spot uses big data and machine learning technologies to sniff out known and unknown IT security threats. -
Extended detection and response in networks, endpoint devices, and the cloud
Extended detection and response (XDR) integrates security functions across endpoint devices and networks. But is XDR the only integrated approach to cybersecurity challenges? We investigate the new technology.
Subscribe to our ADMIN Newsletters
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Most Popular
Support Our Work
ADMIN content is made possible with support from readers like you. Please consider contributing when you've found an article to be beneficial.
