Webinar Explains How Darknet Intelligence Can Support Cyber Incident Response

Summary

A DarkOwl–Blackpanda webinar explains how darknet searches can enrich incident response, investigate exposed data and credentials, and support proactive compromise assessments. Blackpanda describes a Southeast Asia case study involving 13.5 million records related to a.

Key points

Blackpanda describes an incident response workflow that validates alerts, scopes attacks, gathers evidence, and contains infections; within the first 48 hours, responders aim to assess the threat actor and potentially exposed assets and data.
The speakers describe using darknet searches for threat actor names, handles, email addresses, IPs, hashes, and domains, then correlating results with endpoint and forensic evidence.
DarkOwl says its platform monitors 25,000–30,000 darknet sites daily and archives data for current and historical searches.
In a Southeast Asia case study, Blackpanda says targeted searches over about two months found 13.5 million records related to one company, helping it assess exposure and take precautions and remediation measures.
The speakers describe proactive compromise assessments that combine darknet searches with endpoint threat hunting to look for signs of leaked credentials or intrusion before a suspected incident is confirmed.

Article Details

Topic: Blackpanda and DarkOwl’s partnership uses darknet intelligence to support incident response, compromise assessments, and investigation of potential data leaks.