Microsoft Threat Intelligence Podcast cover image

Microsoft Threat Intelligence Podcast

Throwing Darts in the Dark With Microsoft Incident Response

Feb 28, 2024
Exploring threat actors' techniques and incident response challenges. Insights into Octo Tempest. The dynamic nature of incident response work. Managing emotions in high-pressure situations. Teamwork and collaboration in cybersecurity. Importance of comprehensive data collection. Unpacking persistence and dwell time in cyber attacks. Personal narratives in the journey to cybersecurity. Promoting diversity in Microsoft's incident response team.
44:13

Podcast summary created with Snipd AI

Quick takeaways

  • Threat actors' dwell times vary, with some favoring quick attacks and others opting for prolonged covert activities within networks.
  • Comprehensive event logs and data sets like scheduled tasks are crucial for reconstructing timelines and tracking threat actor activities in incident response work.

Deep dives

Dwell Time Variability Among Threat Actors

Threat actors exhibit varying dwell times, with some opting for quick smash-and-grab attacks, completing within 24 hours, while others prefer longer stays to explore high-value assets. The dichotomy in strategies results in either swift exits or prolonged covert activities within compromised networks.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode