> The Other End of the Connection and Why Public IP Context Shapes Every Security Investigation

An alert tells you something unusual has happened but context tells you who you might be dealing with. Every suspicious connection has two ends, detection tools are good at describing what happened on your side, such as a host talking at odd hours, a device sending more data than usual, a workstation reaching somewhere it.. The post The Other End of the Connection and Why Public IP Context Shapes Every Security Investigation appeared first on Security Boulevard.