{"id":44595,"date":"2021-12-28T15:00:00","date_gmt":"2021-12-28T15:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/vulnerabilities-threats\/an-adaptive-security-strategy-is-critical-for-stopping-advanced-attacks"},"modified":"2021-12-28T15:00:00","modified_gmt":"2021-12-28T15:00:00","slug":"an-adaptive-security-strategy-is-critical-for-stopping-advanced-attacks","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/an-adaptive-security-strategy-is-critical-for-stopping-advanced-attacks\/","title":{"rendered":"An Adaptive Security Strategy Is Critical for Stopping Advanced Attacks"},"content":{"rendered":"
<\/div>\n

Security operation centers (SOCs) are encountering threats that quickly swivel from a hands-on keyboard attack to a wide-scale and destructive ransomware attack, or even a complex nation-state attack. Current triage and remediation by alert will likely fail in such situations.<\/p>\n

While alerts are a good starting point for investigation, they don’t help defenders to efficiently remediate the severity, effects, and spread of an attack. Security teams need to shift away from queues of isolated alerts and toward incidents that enable handling of entire end-to-end attacks. <\/p>\n

Moving from an alert-based triage and remediation system to one built around comprehensive incident remediation can have huge advantages, from time and resource savings, a hugely lifted burden from security teams, and overall strengthening of your security posture built on a zero-trust, defense-in-depth approach: <\/p>\n