{"id":10640,"date":"2022-08-12T15:07:58","date_gmt":"2022-08-12T13:07:58","guid":{"rendered":"https:\/\/www.kappadata.be\/?page_id=10640"},"modified":"2024-12-02T13:45:53","modified_gmt":"2024-12-02T11:45:53","slug":"threat-hunting","status":"publish","type":"page","link":"https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/threat-hunting\/","title":{"rendered":"Threat Hunting"},"content":{"rendered":"

[vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” css=”.vc_custom_1610556427925{background-image: url(https:\/\/www.kappadata.be\/wp-content\/uploads\/2020\/10\/Kappa-Data-Header-2.jpg?id=1191) !important;}” z_index=””][vc_column][qode_elements_holder number_of_columns=”one_column”][qode_elements_holder_item advanced_animations=”no” item_padding=”5% 10% 10% 10%”][vc_column_text]<\/p>\n

Threat Hunting<\/h1>\n

[\/vc_column_text][vc_column_text]<\/p>\n

When an AI-based antivirus is no longer sufficient…<\/span><\/h3>\n

[\/vc_column_text][vc_empty_space height=”80px” el_class=”onlyphone”][\/qode_elements_holder_item][\/qode_elements_holder][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”grid” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” z_index=”” background_color=”#f3f3f3″ padding_top=”20″][vc_column css=”.vc_custom_1604415412261{margin-top: -100px !important;}”][qode_elements_holder number_of_columns=”one_column”][qode_elements_holder_item horizontal_alignment=”left” advanced_animations=”no” custom_class=”cardstatic” background_color=”#ffffff” item_padding=”5% 10% 5% 10%”][vc_empty_space height=”20px”][vc_column_text css=””]<\/p>\n

What is Threat Hunting?<\/h2>\n

[\/vc_column_text][vc_column_text]Fortunately, at the time of writing, we cannot yet speak of war in our country. Or can we? That depends on your definition of “war.” Even within our region, companies are under constant attack. Hackers from all over the world have free access to not only our public IP addresses<\/strong>, but they can also send mail to any of us. You don’t even have to distinguish between personal or business related mails.<\/p>\n

The intention of these hackers is usually to make money, but sometimes there is also a political motive behind it. It is very difficult to find this out, let alone prove it. The type of company and the consequences can raise some suspicions though.<\/p>\n

Regardless of what they have in mind, the consequences are rarely minuscule.\u00a0\u00a0<\/strong><\/p>\n

That is why we have all kinds of shields set up such as firewalls, email security and endpoint protection<\/strong>. The weakness of humans is exploited to gain themselves an access to the computer – with the network connected to it – through a backdoor. If you can’t count on the alertness of that user, how can you count on him or her to report his or her mis-click?<\/p>\n

What we are looking for is a kind of camera system that detects and records every movement in the network. By making correlations between different actions, suspicious patterns can be recognized.<\/p>\n

Something more technical…\u00a0<\/strong><\/em><\/p>\n

Mitre Att@ck<\/strong> is an American organization that closely monitors and maps the actions of hackers. An attack technique is a combination of various – in itself seemingly harmless – commands, most of which are also used by sysadmins.<\/p>\n

Before encrypting an entire network, hackers search their way around a network, map out where the backups are, which servers are important and so on. Between the initial contact and the effective encryption, days, weeks and sometimes months go by. The key is to detect the hacker before the encryption happens but also before he had a chance to upload data.[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]<\/p>\n

EDR \/ XDR<\/h4>\n

The detection of these techniques, usually takes place in an EDR<\/strong> or XDR<\/strong> product. (Endpoint\/eXtended Detection and Response) This piece of software that is sometimes an extension of an existing endpoint protection or sometimes an entirely separate product, acts as a kind of probe that stores every activity in an on-computer<\/strong> and\/or cloud based database<\/strong>. The latter is usually called datalake. Depending on the product, you can immediately and automatically<\/strong> assign actions to certain triggers or you can program queries to generate alarms.<\/p>\n

When comparing these products you will see that some AI based endpoint protection software<\/strong> can block multiple actions even before EDR has had to catch them. When we talk about the term XDR, we see that the interpretation can also be different.[\/vc_column_text][vc_column_text css=””]<\/p>\n

Managed EDR<\/h4>\n

Suppose the system makes a detection that is almost certainly related to the presence of a hacker, then the desire is to remove this hacker from the network<\/strong>. The EDR tools will block the activity whether or not the hacker logs off, however, that does not guarantee that the hacker has not already installed loopholes. The hacker might have realized he was caught and accelerated the encryption process. Consequently, quick action<\/strong> in defense is appropriate. It is not obvious for everyone to free up the necessary resources at any time of the day or on weekends.<\/p>\n

The technical teams of the involved vendors are trained for this and are ready 24×7 to carry out the effective countermeasures. We speak here of MDR, Guard<\/strong> or whatever the vendor wishes to use as a name for the service.<\/p>\n

 <\/p>\n

 <\/p>\n

Sophos<\/a><\/h2>\n

In 2015, Surfright – the company behind Hitman Pro – was acquired by Sophos. Soon Sophos emerged as one of the most progressive players in the endpoint protection market and excels in Gartner’s leaders quadrant. With the addition of XDR, you can start a scavenger hunt through the history of movements in the network. No hacker can stay under the radar. With the addition of MDR (Managed Detection and Response) Sophos keeps an eye on your network 24 x 7.3<\/p>\n

Barracuda Networks<\/h2>\n

Threat Hunting for detecting cyber threats with your cyber security team can be offered with Barracuda XDR<\/a>. This platform is in MSP form with integrations for endpoint, email, network and server security.<\/p>\n

For threat hunting and threat responding, Barracuda Managed XDR is an open extended detection and response (XDR) solution that combines advanced technologies with a team of security analysts in our Security Operations Center (SOC).[\/vc_column_text][vc_video link=”https:\/\/www.youtube.com\/watch?time_continue=1&v=y9yuwHb7J5M&source_ve_path=Mjg2NjY” css=””][\/qode_elements_holder_item][\/qode_elements_holder][vc_empty_space height=”25px”][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”grid” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” z_index=”” background_color=”#f3f3f3″ padding_top=”75″ css=”.vc_custom_1603192215592{background-color: #ffffff !important;}” padding_bottom=”75″][vc_column][vc_column_text]<\/p>\n

Why choose Kappa Data?<\/h2>\n

[\/vc_column_text][vc_empty_space height=”20px”][vc_row_inner row_type=”row” type=”full_width” text_align=”left” css_animation=””][vc_column_inner width=”1\/3″][vc_empty_space height=”30px” el_class=”onlyphone”][qode_elements_holder number_of_columns=”one_column”][qode_elements_holder_item horizontal_alignment=”left” advanced_animations=”no” item_padding=”5% 10% 5% 10%” background_color=”#f3f3f3″ custom_class=”round”][vc_empty_space height=”20px”][vc_column_text]<\/p>\n

Technical Expertise<\/h3>\n

Kappa data supports resellers and customers with extensive technical knowledge, training and guidance. Our certified technical and presales teams are always there for you![\/vc_column_text][vc_empty_space height=”28px”][\/qode_elements_holder_item][\/qode_elements_holder][\/vc_column_inner][vc_column_inner width=”1\/3″][vc_empty_space height=”30px” el_class=”onlyphone”][qode_elements_holder number_of_columns=”one_column”][qode_elements_holder_item horizontal_alignment=”left” advanced_animations=”no” item_padding=”5% 10% 5% 10%” background_color=”#f3f3f3″ custom_class=”round”][vc_empty_space height=”20px”][vc_column_text]<\/p>\n

Personal touch<\/h3>\n

At Kappa Data, you will enjoy a particularly personal and professional approach, from quick quotes to demos and customer-friendly service with your regular contacts. We are there for you.[\/vc_column_text][vc_empty_space height=”28px”][\/qode_elements_holder_item][\/qode_elements_holder][\/vc_column_inner][vc_column_inner width=”1\/3″][vc_empty_space height=”30px” el_class=”onlyphone”][qode_elements_holder number_of_columns=”one_column”][qode_elements_holder_item advanced_animations=”no” custom_class=”round” background_color=”#f3f3f3″ item_padding=”5% 10% 5% 10%”][vc_empty_space height=”20px”][vc_column_text]<\/p>\n

Excellent service<\/h3>\n

Kappa Data is a value-added distributor that thinks along with you in a solution-oriented manner. We always ensure a good relationship between all parties and mediate where necessary in case of conflicts.[\/vc_column_text][vc_empty_space height=”28px”][\/qode_elements_holder_item][\/qode_elements_holder][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”grid” angled_section=”no” text_align=”center” background_image_as_pattern=”without_pattern” z_index=”” padding_top=”75″ padding_bottom=”75″ background_color=”#f3f3f3″][vc_column width=”1\/6″][\/vc_column][vc_column width=”2\/3″][vc_column_text]<\/p>\n

What our customers say<\/h3>\n

[\/vc_column_text][vc_column_text]A trusted partner for over 20 years<\/p>\n

Snijders Compuservice, Jef Snijders <\/strong><\/span>[\/vc_column_text][vc_empty_space height=”50px”]Contact us!<\/a>[\/vc_column][vc_column width=”1\/6″][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”grid” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” z_index=”” padding_top=”50″ padding_bottom=”20″][vc_column][vc_column_text]<\/p>\n

Onze partners<\/h3>\n

[\/vc_column_text]

\n
\n \n
\n \n \n \n \n
\n\n
\n
\n
\n
\n\n \n <\/a>\n \n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <\/a>\n \n
<\/div>\n
\n \n\"\"<\/span> <\/div>\n <\/div>\n\n \n \n<\/article>\n
\n \n \n \n \n
\n\n
\n
\n
\n
\n\n \n <\/a>\n \n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <\/a>\n \n
<\/div>\n
\n \n\"Kappa<\/span> <\/div>\n <\/div>\n\n \n \n<\/article>\n
\n \n \n \n \n
\n\n
\n
\n
\n
\n\n \n <\/a>\n \n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <\/a>\n \n
<\/div>\n
\n \n\"Barracuda<\/span> <\/div>\n <\/div>\n\n \n \n<\/article>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n <\/div>\n\n \n <\/div>[\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

[vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” css=”.vc_custom_1610556427925{background-image: url(https:\/\/www.kappadata.be\/wp-content\/uploads\/2020\/10\/Kappa-Data-Header-2.jpg?id=1191) !important;}” z_index=””][vc_column][qode_elements_holder number_of_columns=”one_column”][qode_elements_holder_item advanced_animations=”no” item_padding=”5% 10% 10% 10%”][vc_column_text] Threat Hunting [\/vc_column_text][vc_column_text] When an AI-based antivirus is no longer sufficient… [\/vc_column_text][vc_empty_space height=”80px” el_class=”onlyphone”][\/qode_elements_holder_item][\/qode_elements_holder][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”grid” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” z_index=”” background_color=”#f3f3f3″ padding_top=”20″][vc_column css=”.vc_custom_1604415412261{margin-top: -100px !important;}”][qode_elements_holder…<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":9867,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"full_width.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-10640","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nThreat Hunting | Kappa Data<\/title>\n<meta name=\"description\" content=\"Proactively discover threats or rogue activity in your network with our Threat Hunting solutions such as XDR, EDR, MDR.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/threat-hunting\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Threat Hunting | Kappa Data\" \/>\n<meta property=\"og:description\" content=\"Proactively discover threats or rogue activity in your network with our Threat Hunting solutions such as XDR, EDR, MDR.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/threat-hunting\/\" \/>\n<meta property=\"og:site_name\" content=\"Kappa Data\" \/>\n<meta property=\"article:modified_time\" content=\"2024-12-02T11:45:53+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/solutions\\\/hot-topics\\\/threat-hunting\\\/\",\"url\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/solutions\\\/hot-topics\\\/threat-hunting\\\/\",\"name\":\"Threat Hunting | Kappa Data\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/#website\"},\"datePublished\":\"2022-08-12T13:07:58+00:00\",\"dateModified\":\"2024-12-02T11:45:53+00:00\",\"description\":\"Proactively discover threats or rogue activity in your network with our Threat Hunting solutions such as XDR, EDR, MDR.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/solutions\\\/hot-topics\\\/threat-hunting\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.kappadata.be\\\/en\\\/solutions\\\/hot-topics\\\/threat-hunting\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/solutions\\\/hot-topics\\\/threat-hunting\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IT solutions\",\"item\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/solutions\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Hot Topics\",\"item\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/solutions\\\/hot-topics\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Threat Hunting\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/\",\"name\":\"Kappa Data\",\"description\":\"The Art of IT-infrastucture, security and IoT distribution\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.kappadata.be\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Threat Hunting | Kappa Data","description":"Proactively discover threats or rogue activity in your network with our Threat Hunting solutions such as XDR, EDR, MDR.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/threat-hunting\/","og_locale":"en_US","og_type":"article","og_title":"Threat Hunting | Kappa Data","og_description":"Proactively discover threats or rogue activity in your network with our Threat Hunting solutions such as XDR, EDR, MDR.","og_url":"https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/threat-hunting\/","og_site_name":"Kappa Data","article_modified_time":"2024-12-02T11:45:53+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/threat-hunting\/","url":"https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/threat-hunting\/","name":"Threat Hunting | Kappa Data","isPartOf":{"@id":"https:\/\/www.kappadata.be\/en\/#website"},"datePublished":"2022-08-12T13:07:58+00:00","dateModified":"2024-12-02T11:45:53+00:00","description":"Proactively discover threats or rogue activity in your network with our Threat Hunting solutions such as XDR, EDR, MDR.","breadcrumb":{"@id":"https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/threat-hunting\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/threat-hunting\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/threat-hunting\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.kappadata.be\/en\/"},{"@type":"ListItem","position":2,"name":"IT solutions","item":"https:\/\/www.kappadata.be\/en\/solutions\/"},{"@type":"ListItem","position":3,"name":"Hot Topics","item":"https:\/\/www.kappadata.be\/en\/solutions\/hot-topics\/"},{"@type":"ListItem","position":4,"name":"Threat Hunting"}]},{"@type":"WebSite","@id":"https:\/\/www.kappadata.be\/en\/#website","url":"https:\/\/www.kappadata.be\/en\/","name":"Kappa Data","description":"The Art of IT-infrastucture, security and IoT distribution","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.kappadata.be\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.kappadata.be\/en\/wp-json\/wp\/v2\/pages\/10640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kappadata.be\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.kappadata.be\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.kappadata.be\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kappadata.be\/en\/wp-json\/wp\/v2\/comments?post=10640"}],"version-history":[{"count":11,"href":"https:\/\/www.kappadata.be\/en\/wp-json\/wp\/v2\/pages\/10640\/revisions"}],"predecessor-version":[{"id":25733,"href":"https:\/\/www.kappadata.be\/en\/wp-json\/wp\/v2\/pages\/10640\/revisions\/25733"}],"up":[{"embeddable":true,"href":"https:\/\/www.kappadata.be\/en\/wp-json\/wp\/v2\/pages\/9867"}],"wp:attachment":[{"href":"https:\/\/www.kappadata.be\/en\/wp-json\/wp\/v2\/media?parent=10640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}