CISA, intelligence agencies release guidance on maturing event logging capabilities alongside international partners

New guidance on event logging and threat detection from the Cybersecurity and Infrastructure Security Agency, intelligence agencies and international partners provides details on how to improve capabilities for defending against “living off the land” attacks that seek to evade discovery.

“The increased prevalence of malicious actors employing living off the land (LOTL) techniques, such as living off the land binaries (LOLBins) and fileless malware, highlights the importance of implementing and maintaining an effective event logging program,” CISA said in ...