Now that 9.2 has been out for some time, it's time to document some of the very cool things the McAfee SIEM can do. While the documentation is a must read for the how, this post is meant to bring you up to speed of the why of some advanced correlation features in 9.2.  Remember, ...
Read Blog
McAfee Network Security Platform customers have benefited from malware protection for some time now. Most customers already use McAfee Global Threat Intelligence (GTI), which has been available since the 6.0 release. The largest and most used reputation service, with over 64 Billion queries per day, GTI classifies files as either good (whitelist) or bad (blacklist), ...
Read Blog
Following our acquisition of NitroSecurity last year, we have been working towards fully integrating their Security Information and Event Management (SIEM) technology into our portfolio of solutions. McAfee Enterprise Security Manager (the fruit of our combined efforts) recently received a 5-star rating from SC Magazine, and now we are proud to announce that McAfee has ...
Read Blog
A few weeks ago, Iran reported intensified cyberattacks on its energy sector that they observed as a direct continuation of the Stuxnet and Duqu attacks. Over the weekend, the IR Cert (Iran’s emergency response team) published a new report that describes this attack as Flame and/or Flamer. Some other news agencies also called  the attack ...
Read Blog
In late 2011, the FBI released documents and data focusing on "Operation Ghost Click." This malicious operation, leveraging a variety of DNSChanger-type malware, was defined by the FBI as an "international cyber ring that infected millions of computers." Associated malware samples and events can be traced back several years, and multiple platforms were targeted. To this day many remain ...
Read Blog