A new insight brief from 21CT security researchers looks at the four categories of malicious behavior that concern organizations the most and how security analytics can identify them. It is important to understand these behaviors, what they are, and why they are dangerous. This understanding is critical to identifying network breaches so that you can move fast to remediate infected and misconfigured systems or thwart an ongoing attack missed by the perimeter. Posted: January 14, 2014, 4:00 pm

1. 21ct.com http://www.21ct.com/blog/security-analytics-to-identify-the-12-indicators-of-compromise/
Security Analytics to Identify the 12 Indicators of Compromise
As a security analyst, much of your day-to-day operational work
involves tracking perimeter defense alerts, responding to end-
point alerts, and running down user reports of suspicious activity.
While these tasks are important, you know that there’s probably
malicious activity on your network beyond the alerts. So how do
you find it? By looking for the most common indicators of
compromise (IOC).
To help you identify these IOCs, the security researchers at 21CT
published an insight brief that examines the most malicious IOCs
and how security analytics can identify them. It is important to
understand these behaviors, what they are, and why they are
dangerous. This understanding is critical to identifying network
breaches so that you can move fast to remediate infected and
misconfigured systems or thwart an ongoing attack missed by
the perimeter.
Download The 12 Indicators of Compromise Insight Brief to learn more and receive exclusive access to new updates
and downloadable analytics as we publish them.
In the insight brief, we look at the following IOCs and how to identify them:
Human Behavior
Alert Visibility
Return on Intelligence
Social Engineering
Machine Behavior
Autonomous System Behavior
Policy Violations
Botnet C&C Traffic
Volumetric Behavior
DDoS Noise Reduction
Unusual Inbound Traffic
Unusual Outbound Traffic
Anomalous Behavior
Geographic Anomalies
Protocol Anomalies
Long-Term Trending
Have questions? Contact us, leave a comment, join the conversation: @21CTinc #12Indicators, and stay up-to-date
21ct.com/IOCs.