Anatomy of a breach.... A must read post for system and Cloud admin
Food for thought those who do not know, Have you ever think about or know an attacker can be present on a network for more than 200 days before being detected? Imagine the damage that can be done to an organization during that time: Accessing sensitive data about your company, products, employees, and clients. Altering the operating system on every computer in your network. Causing irreparable damage to your company – both in terms of dollars and damaged reputation – before you even know the attacker’s there. Hackers typically gain con07ol of a network using a privileged account (e.g., domain admin) within 24-48 hours of initiating the attack. They move silently through the network, avoiding actions that would alert IT to their presence. If they are discovered, it’s usually by chance or an external notification. Do you know how a security breach actually happens? How hackers get a foothold, and what they do once they’re in? Most importantly: Are you as secure as you think you...