Learn about Zero Trust Architecture
Impenetrable cybersecurity without sacrificing usability
Gain detailed visibility into all your endpoints activities
Harden applications and hardware environments
Immediate and continuous response to incidents
Close the window of time your data could be exposed
Get your Comodo solutions setup, deployed or optimized
Control access to malicious websites
Defend from any internet based threats
Stop email threats before it enters your inbox
Preserve and protect your sensitive data
Keep your website running fast and malware free
Add encryption to your websites
Automated certificate mgmt. platform
Secure private intranet environments
Digital signature solutions for cloud apps
Encrypt emails for senders and recipients
Stay compliant with PCI DSS
Trusted authentication for IoT devices
Francisco Partners a leading technology-focused private equity fund, has acquired a majority stake in Comodo’s certificate authority business. Newly renamed from Comodo CA Limited to Sectigo Limited. Privacy Policies, Trademarks, Patents and Terms & Conditions are available on Sectigo Limited’s web site.
Meet the people behind the direction for Comodo
Get the latest news about Comodo
People are the key to achievement and prosperity
Stay up to date with our on-demand webinars
Worldwide: Sales, Support and General Inquiries
Schedule a live demonstration of our solutions
Need immediate help? Call 1-888-551-1531
Instantly removes viruses to keep your PC virus free
Experience true mobile security on your mobile apple devices
Secure Internet Browser based on Chrome
Chrome browser internet security extension
Submit a ticket to our support team
Share any product bugs or security flaws
Collaborate with research experts on data sets
Valkyrie Threat Intelligence Plugins
Valkyrie Threat Intelligence APIs
Insider threat detection is key to enterprise security. Identifying threats and detecting them on time helps a great deal to ensure comprehensive enterprise security. Let’s discuss here 10 techniques that could be used for effective threat detection. Before that, let’s discuss those basic things that you need to do as part of your getting ready for the threat detection…
Now, let’s move on to the threat detection solution, the best 10 detection techniques…
Look for spikes in activity
Spikes in activity, for example too many file modifications or an unusually great number of login attempts by a particular account could be an indication of a threat. Hence, as part of threat detection, it’s very important to look for spikes in activity. Once you notice a spike, you should investigate it to find out if it’s really a threat or not.
Monitor all access attempts, look for anomalous ones…
It’s very important that you keep an eye on all access attempts and look for anomalous ones, if any. Keep checking and if there is any unusual change in the frequency and volume of logins, successful ones and failed ones as well, do a thorough check. You should also focus on any activity that happens after business hours and anything that’s a deviation from usual activities.
Look for anomalies in the VPN access to your network
Any anomaly that you spot in the VPN access to your enterprise network- abnormal volume or speed, or something fishy in the geographical location could be indicative of a potential threat. Look for such anomalies and if you notice any, analyze them to ensure if it’s a threat or not.
Monitor privileged accounts, service accounts with utmost caution
Privileged accounts in an enterprise are meant to be used rarely. Likewise, privileged accounts as well as service accounts are supposed to be used only for carrying out certain tasks that other accounts they are not authorized to perform. Hence you have to monitor activities of such accounts very carefully and if there’s anything unusual or any policy violation happening, check it out.
Check for unusual access to sensitive company data
You should always check for unusual access to sensitive company data. Things like a high number of access events, access to different files, happening over a short span of time etc should be reviewed.
Monitor all shared accounts
You must identify and monitor all shared accounts in your organization’s network. This is important to ensure effective security for any company. Such accounts should be monitored and all risk factors need to be analyzed; information security breaches happen greatly from such accounts.
Monitor all infrastructure resources
All infrastructure resources need to be inspected through a security lens frequently. Any activity that happens around servers, databases, file shares etc. should have a process and top 5 ram usage applications check. If at all any suspicious activity is spotted, it needs to be further investigated.
Assess, correlate data from all sources
For ensuring proper cyber security, it’s always good to assess and correlate all data that comes from various data sources. That would help you identify any attempt to access sensitive data and act upon it before it’s too late.
Assess users in their own peer groups
Always make it a point to assess users in their peer groups. Don’t go applying the same set of rules to every department or every individual, judge them based on rules that apply to their department or the nature of their work.
Comodo Internet Security
Tags: Threat Detection,Threat Protection
Reading Time: 3 minutes The proliferation of ransomware in recent times has made many companies sit up and assess their existing IT infrastructure, especially their IT security solutions. While many of the security solutions that businesses have been using for several years now help to mitigate the threat of ransomware, they are not built to thwart these threats completely….
Reading Time: 3 minutes Comodo publishes strategic analysis of 97 million malware incidents in Q2 Comodo detected and analyzed nearly 100 million incidents in Q2 2017, almost quadruple the number from its Q1 report, in a detailed study released by Comodo Threat Research Labs (CTRL). Leveraging nearly 20 years of experience, and software installations in every country on Planet…
Reading Time: 3 minutes Comodo Threat Research Labs (CTRL) detected more than 25 million malware incidents in 223 top-level country code domains (ccTLD), in nearly every nation, province, state and city on Earth in its new Q1 2017 Threat Report. Here, we summarize the report’s key findings. Russia: World’s No. 1 Malware Victim Despite decades of analysis highlighting Russia…
Sign up to our cyber security newsletter
Comodo Cybersecurity would like to keep in touch with you about cybersecurity issues, as well as products and services available. Please sign up to receive occasional communications. As a cybersecurity company, we take your privacy and security very seriously and have strong safeguards in place to protect your information.
See how your organization scores against cybersecurity threats