Pierre Noujeim, Author at D3 Security

Select a term…

A Modern Playbook for Ransomware

SOC teams need every advantage against ransomware. Learn how a SOAR playbook can streamline incident response, saving time and minimizing the impact of attacks.
How to Build a SOAR Playbook: Start with the Artifacts

Simplify SOAR playbook development with an artifact-based approach. Learn to integrate tools, categorize commands, map key artifacts, and build effective playbook stages.
Simplifying SOAR Maintenance with D3’s Dynamic Data Normalization

Learn how D3’s normalized data ingestion simplifies playbooks, streamlines workflows, and reduces engineering support for SOAR maintenance.
MSSPs Say Client Communication Is Too Hard. Here’s How We’re Helping

We recently published the results of our 2024 MSSP Survey, an exploration of the current state of the managed security services industry, told from the…
Threat Hunting in Smart SOAR

In modern cybersecurity operations, threat hunting has become an essential proactive defense strategy. Leveraging Security Orchestration, Automation, and Response (SOAR) playbooks enhances this activity, making…
Stop Ransomware in its Tracks: Suspicious File Activity

The Threat Scenario Consider a scenario where your file server, “D3Cyber-FileServer,” triggers an alert. The alert indicates an encryption attempt on “important_document.docx” by the command-line…
Beyond One-Size-Fits-All: Advanced Playbook Triggers for Unique Use-Cases

Many SOAR users find themselves frustrated with inflexible playbook builders that often require extensive manual intervention to accommodate unique or complex workflows. Such rigidity in…
What it’s Like Using Integrations Built by D3

Integrating a variety of cybersecurity tools and platforms is often a complex and demanding task. This process, essential to the effective deployment of Security Orchestration,…
The 10 Most Common MITRE Tactics & Techniques of 2023

SOAR solutions create a centralized queue of all incidents going on in a security team’s environment. Endpoint, SIEM, email, behavior, and network alerts are all…