Blog

Most enterprise security teams have solid coverage on email attachments, credential harvesting forms, and malware downloads. What they tend to have less visibility into is what happens inside the SaaS platforms their marketing departments live in every day. Meta...

The cybersecurity industry is entering the era of agentic cybersecurity, and in many organizations it has already begun. AI systems are no longer limited to assisting analysts with enrichment or automation tasks. Increasingly, they are investigating alerts, validating...

We've just updated the alphaMountain app in Splunkbase – the official app store for Splunk by Cisco. Read on to learn about the changes we made and how it's even more useful for threat analysts and incident responders.   Splunk URL Enrichment Has Been Too Shallow...

Turning URL Investigation into Instant Understanding In modern security operations, speed and clarity matter more than ever. Analysts are inundated with URLs in alerts from anything that touches the internet, and each one represents a potential risk that must be...

Since we launched threatYeti in 2023, we’ve seen the security community embrace our real-time search engine for risky domains and IP addresses. With our comprehensive intelligence, threatYeti has become a go-to replacement for the web-based versions of tools like...

We’ve spent years working with security teams that rely on VirusTotal every day. We understand why it became foundational: it made URL, domain, IP, and file analysis accessible in a single workflow, and it gave analysts a fast way to sanity-check suspicious...