topic Stealthwatch Cloud - Detect FireEye RedTeam toolkit in Security Analytics https://community.cisco.com/t5/security-analytics/stealthwatch-cloud-detect-fireeye-redteam-toolkit/m-p/4195561#M606 <P>FireEye experienced a breach. Their APT toolkit was stolen. FireEye is sharing indicators of compromise and countermeasures on GitHub. How can I use Stealthwatch Cloud to detect those IOCs?</P><P>&nbsp;</P><P><A href="https://github.com/fireeye/red_team_tool_countermeasures" target="_blank">https://github.com/fireeye/red_team_tool_countermeasures</A></P> Tue, 08 Dec 2020 23:15:42 GMT olfuddyduddy 2020-12-08T23:15:42Z Stealthwatch Cloud - Detect FireEye RedTeam toolkit https://community.cisco.com/t5/security-analytics/stealthwatch-cloud-detect-fireeye-redteam-toolkit/m-p/4195561#M606 <P>FireEye experienced a breach. Their APT toolkit was stolen. FireEye is sharing indicators of compromise and countermeasures on GitHub. How can I use Stealthwatch Cloud to detect those IOCs?</P><P>&nbsp;</P><P><A href="https://github.com/fireeye/red_team_tool_countermeasures" target="_blank">https://github.com/fireeye/red_team_tool_countermeasures</A></P> Tue, 08 Dec 2020 23:15:42 GMT https://community.cisco.com/t5/security-analytics/stealthwatch-cloud-detect-fireeye-redteam-toolkit/m-p/4195561#M606 olfuddyduddy 2020-12-08T23:15:42Z