security - devilreef.net

devilreef.net

Sign in Subscribe

security

A collection of 12 posts

How Palantir Manages Continuous Vulnerability Scanning at Scale

vulnerability management

How Palantir Manages Continuous Vulnerability Scanning at Scale

This was a post I co-authored which originally published on the Palantir Blog. It is copied here for posterity. The Challenge Effective vulnerability management is a cornerstone of any established security program. For complex cloud software providers like Palantir, staying on top of vulnerabilities and quickly remediating them is critical

Democratizing Security Detection

Democratizing Security Detection

This was a post I authored which originally published on the Palantir Blog. It is copied here for posterity. Introduction Security detection programs face significant scaling challenges. As the size and scope of an organization grows, so too do the volume and diversity of security alerts; this influx can result

Expanding Palantir's bug bounty program

Expanding Palantir's bug bounty program

This was a post I authored which originally published on the Palantir Blog. It is copied here for posterity. We at Palantir are committed to continually investing in the privacy and security of our software products. As part of this commitment to safeguarding our customers and their data, especially during

Broadening Palantir's Bug Bounty Program: Trust, Security, and Transparency

Broadening Palantir's Bug Bounty Program: Trust, Security, and Transparency

This was a post I authored which originally published on the Palantir Blog. It is copied here for posterity. Security, privacy, transparency, and customer trust are pillars of our culture and business disposition. Continuing our investment in these values, we are excited to announce the expansion of our public bug

PhishCatch: Detecting password reuse from the inside out

PhishCatch: Detecting password reuse from the inside out

This was a post I co-authored which originally published on the Palantir Blog. It is copied here for posterity. A browser extension to enforce password hygiene In an effort to bolster Palantir’s password hygiene, our Information Security team, with deep collaboration from our friends at SpecterOps, sought to create

Palantir joins GitHub's token scanning program

Palantir joins GitHub's token scanning program

This was a post I authored which originally published on the Palantir Blog. It is copied here for posterity. We are excited to announce we’ve partnered with GitHub as part of their token scanning program. This program will help us better protect our customers by discovering and revoking Palantir

Assessing the effectiveness of a new security data source: Windows Defender Exploit Guard

Assessing the effectiveness of a new security data source: Windows Defender Exploit Guard

This was a post I co-authored which originally published on the Palantir Blog. It is copied here for posterity. Windows Defender Exploit Guard (WDEG) is a suite of preventative and detective controls to identify and mitigate active exploitation attempts against Windows hosts. Based on the previous success of the Enhanced

Announcing Palantir's bug bounty program

Announcing Palantir's bug bounty program

This was a post I authored which originally published on the Palantir Blog. It is copied here for posterity. We are excited to announce the public bug bounty program for Palantir’s software and infrastructure. Read our new Vulnerability Disclosure Policy here. Security is one of our core tenets at

Windows Privilege Abuse: Auditing, Detection, and Defense

Windows Privilege Abuse: Auditing, Detection, and Defense

This was a post I co-authored which originally published on the Palantir Blog. It is copied here for posterity. Privileges are an important native security control in Windows. As the name suggests, privileges grant rights for accounts to perform privileged operations within the operating system: debugging, impersonation, etc. Defenders who

Palantir + SpecterOps Partnership

Palantir + SpecterOps Partnership

This was a post I co-authored which originally published on the Palantir Blog. It is copied here for posterity. At Palantir, we’re passionate about building software that solves real-world problems. Our software has been used to stop terrorist attacks, develop new medicines, gain an edge in global financial markets,

Alerting and Detection Strategy Framework

Alerting and Detection Strategy Framework

This was a post I co-authored which originally published on the Palantir Blog. It is copied here for posterity. Alerting and Detection Strategies (ADS) are one of the critical requirements for an effective Incident Response (IR) and Detection team. Well-functioning IR teams invest time and energy into development of new

Windows Event Forwarding for Network Defense

Windows Event Forwarding for Network Defense

This was a post I co-authored which originally published on the Palantir Blog. It is copied here for posterity. Incident detection and response across thousands of hosts requires a deep understanding of actions and behavior across users, applications, and devices. While endpoint detection and protection tools can provide some lift