Resources

Guarding-Against-Fileless-Malware-Types-and-Prevention
Blog

Guarding Against Fileless Malware: Types and Prevention

By Dilki Rathnayake on Thu, 09/14/2023
Fileless malware, true to its name, is malicious code that uses existing legitimate programs in a system for compromise. It operates directly in the Random Access Memory (RAM) without requiring any executable files in the hard drive. Differing from conventional malware, fileless attacks are stealthier in nature, falling under the category of low...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
10-Mistakes-in-Cybersecurity-and-How-to-Avoid-Them
Blog

10 Mistakes in Cybersecurity and How to Avoid Them

By Katrina Thompson on Mon, 09/11/2023
It's easy to rest on our laurels. Prevent a few breaches – or go long enough without one – and you start to feel invincible. While our efforts are certainly laudable, we can't get too comfortable. As defenders, we always need to be on the hunt for what we've missed and ways to do better. Here are ten common cybersecurity mistakes that crop up (and...
Cybersecurity
File Integrity & Change Monitoring
Datasheet

Tripwire Services Comparison Datasheet

Not all organizations have the internal resources necessary to manage their cybersecurity and compliance solutions in-house. This may seem like a roadblock to those who see the greater potential of their solutions and want to do more to reach their goals but cannot expand their technical teams due to the high demand for qualified candidates or budgetary limitations. However, the services available...
Managed Security Services
Working with a Reliable Partner for Cybersecurity Success
Blog

Working with a Reliable Partner for Cybersecurity Success

By Joe Pettit on Thu, 08/31/2023
Technology companies are often seen as revolving doors of constantly shifting personnel. Whether they are seeking a better work environment or chasing a higher paycheck, these staff changes can hurt an organization’s progress. Worse yet, the customers are often negatively impacted by these changes in the continuity of established relationships. At...
Vulnerability & Risk Management
Cybersecurity
File Integrity & Change Monitoring
Managed Security Services
Security Configuration Management
Understanding-Firewalls
Blog

Understanding Firewalls – Types, Configuration, and Best Practices for Effective Network Security

By Dilki Rathnayake on Wed, 08/30/2023
A firewall is a security device that controls the flow of traffic across a network. A firewall may be a hardware appliance, or it may be a piece of software that runs on a third-party operating system. Firewalls operate based on a set of pre-defined, as well as customizable security rules that inspect network traffic to block or permit access to a...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
Security Configuration Management
The CIA Debate: Which is the Most Important?
Blog

The CIA Debate: Which is the Most Important?

By Anastasios Arampatzis on Mon, 08/21/2023
The Confidentiality, Integrity and Availability (CIA) Triad is a crucial information security model that guides and assesses how an organization manages data during storage, transmission, and processing. Each component of the triad plays a vital role in maintaining information security: Confidentiality means that data should not be accessed...
Vulnerability & Risk Management
Cybersecurity
File Integrity & Change Monitoring
The Use of Natural Language Processing for Identifying and Mitigating Threats
Blog

The Use of Natural Language Processing for Identifying and Mitigating Threats

By Tripwire Guest Authors on Tue, 08/15/2023
As technology advances, the battle between cyber criminals and organizations intensifies. Cyber threats have become more sophisticated, complex, and widespread, posing a significant risk to the security and integrity of sensitive data. In Q1 2023 alone, the number of global cyber attacks increased by 7%, with an average of 1,248 attacks reported...
Cybersecurity
Incident Detection & Investigation
2023-Business-Email-Compromise-Statistics
Blog

2023 Business Email Compromise Statistics

By Josh Breaker-Rolfe on Tue, 08/15/2023
In cybersecurity, knowledge is everything. From APT intelligence to zero-day vulnerabilities, relevant and timely information can be the difference between a thwarted attack and a total disaster. With Business Email Compromise (BEC) attacks at their zenith, there has never been a better time for a comprehensive BEC report. As such, Fortra has...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
Security Immutability: The Importance of Change
Blog

Security Immutability: The Importance of Change

By Tyler Reguly on Mon, 08/14/2023
A few years ago, I wrote about the importance of security immutability. More specifically, I discussed how important it is that your environment be unchangeable in order to ensure that it remains secure. As I looked back on the article, I found it rather amusing that the article was published 4 years ago, but that feels like a lifetime ago. In the...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
Guide

5 Things Your FIM Solution Should Do for You

File integrity monitoring (FIM) is a critical security control that helps organizations detect system changes in real-time that indicate impacts to compliance and potential cybersecurity incidents, empowering teams to respond rapidly. FIM is required by many major compliance standards such as North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), the...
File Integrity & Change Monitoring
Tripwire Enterprise: Five ‘Other’ Things You Should Know
Blog

Tripwire Enterprise: Five ‘Other’ Things You Should Know

By Faisal Parkar on Thu, 08/10/2023
Network engineers and security analysts have a lot in common. Both require the ability to not only understand the problems at hand but to ascertain the moments leading to them. A typical scenario would include a request to help with a problem a customer has been experiencing. The person you are trying to assist is probably a member of the IT team in...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
Is-Your-MSP-Taking-Its-Own-Security-Seriously
Blog

Is Your MSP Taking Its Own Security Seriously?

By Tripwire Guest Authors on Wed, 08/02/2023
Most small and midsized businesses trust an IT services partner to help them secure their networks. A few years ago, high-profile cyberattacks targeting MSP vendors Kaseya and SolarWinds thrust the security risk of relying on a complex chain of vendors into the technology media and moved the Department of Homeland Security to issue a statement...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
Security Configuration Management
An Introduction to Cyber Threat Intelligence: Key Concepts and Principles
Blog

An Introduction to Cyber Threat Intelligence: Key Concepts and Principles

By Dilki Rathnayake on Wed, 08/02/2023
Cyber Threat Intelligence (CTI), or threat intelligence, is evidence-based knowledge established from current cyber threats, gathered from myriad sources to identify existing or potential attacks. Threat intelligence assists in identifying the motives, targets, and attack behaviors of a threat actor and implementing strong defenses from future...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
Tripwire Enterprise: Reimagining a Winning Product
Blog

Tripwire Enterprise: Reimagining a Winning Product

By Jeff Moline on Thu, 07/27/2023
How many security products does it take to monitor an organization? Even a small company often finds itself working with multiple monitoring tools to gain visibility into its security posture. This creates multiple blind spots, as a security analyst needs to jump between different tools with different formats and configurations to research a...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
attcking-the-center-for-internet-security
Blog

ATT&CKing the Center for Internet Security

By Tyler Reguly on Tue, 07/25/2023
I recently spoke at a Fortra Webinar about CIS and MITRE. More specifically, I discussed the intersection between the CIS Critical Security Controls, CIS Benchmarks, and MITRE ATT&CK. In this post, I won't go into deep details about the core background, but there are plenty of excellent references available online, including our breakdown of the...
Cybersecurity
Compliance
Incident Detection & Investigation
Using-MFT-to-Solve-Your-Cloud-Data-Challenges-5-Key-Takeaways-bw
Blog

Using MFT to Solve Your Cloud Data Challenges: 5 Key Takeaways

By Tripwire Guest Authors on Wed, 07/19/2023
As business operations evolve, the challenge of securely moving data within the cloud is one of elevated concern. Transferring sensitive information to it is another. Many are caught between what worked in on-prem technologies and what is needed in cloud-based architectures. Others have sidestepped the security challenges by implementing a Managed...
Cybersecurity
File Integrity & Change Monitoring
Guide

How Managed Services Can Help With Cybersecurity Compliance

Organizations are often overburdened with managing complex tools to handle their most important compliance responsibilities, and in many cases lack the internal headcount to manage those tools with highly-trained expertise. Managed services can solve your security staffing and resource challenges by arming your team with security expertise to maintain optimal compliance. Managed service providers...
Compliance
CIS Controls
FISMA
GDPR
HIPAA
NERC CIP
NIST
PCI DSS
SOX
Insider-Risk-Hits-Closer-to-Home
Blog

Insider Risk Hits Closer to Home

By Stefanie Shank on Wed, 06/21/2023
If you’re busy securing the perimeter, mandating strong authentication practices, and restricting software downloads, you may be missing the mark. (Just to be clear: if you are doing those things, keep it up. You’re off to a good start, and none of what follows here replaces classic and vital cybersecurity measures.) Protecting your organization...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
Guide

File Integrity Monitoring (FIM) Toolkit

File integrity monitoring (FIM) is used to detect and correct unauthorized system changes that may be indicators of compromise. As the inventors of FIM, Fortra’s Tripwire has a multi-decade track record of helping organizations that want to reduce cyber risk and achieve system integrity to avoid security breaches and audit fines. This toolkit is a collection of helpful resources such as articles,...
File Integrity & Change Monitoring
noise_factory_soc
Blog

Do you Work in a SOC Noise Factory?

By Anthony Israel-Davis on Mon, 05/22/2023
Gabrielle is a security engineer. She deploys tools to scan for threats and vulnerabilities, read logs, and manage the security risks for her company, but is all that data really helping? Sometimes, it seems like she works in a noise factory instead of a SOC. The cacophony of all the log and event data and vulnerability scans are pouring into the...
Cybersecurity
Incident Detection & Investigation