Active_Adversary_Report

KO | EN

gitlite — search

#javascript #python #hacktoberfest #ai #android #linux #docker #nodejs #macos #kubernetes #vue #security #pytorch #openai

Active_Adversary_Report

(★ 14)

Datasets from the Sophos Active Adversary Report

Active_Adversary_Report 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Active_Adversary_Report
# Datasets from the Sophos Active Adversary Report
This repository contains copies of data analyzed in Sophos' Active Adversary Reports, starting with the report issued in April 2025 ("It Takes Two: The 2025 Sophos Active Adversary Report"). We are providing access to this data in the hope of starting broader conversations in the defender community about the issues raised in the reports, and as part of our continuing efforts to encourage greater transparency and collaboration within the infosec community. We welcome your comments.

The data has been collected, normalized, and sanitized for public use as described in each year's report ("Appendix: Methodology"). The text of that appendix as of the April 2025 release is reproduced in the Methodology below. We've also uploaded a PDF copy of each report for reference / convenience.

# Methodology
The data in this report was captured over the course of individual investigations undertaken by Sophos X-Ops' Incident Response and MDR teams. For this first report of 2025, we gathered case information on all investigations undertaken by the teams throughout 2024 and normalized it across 52 fields, examining each case to ensure that the data available was appropriate in detail and scope for aggregate reporting as defined by the focus of the proposed report. We further worked to normalize the data between our MDR and IR reporting processes.

When data was unclear or unavailable, the authors worked with individual IR and MDR case leads to clear up questions or confusion. Incidents that could not be clarified sufficiently for the purpose of the report, or about which we concluded that inclusion risked exposure or other potential harm to the Sophos-client relationship, were set aside. We then dissected each remaining case’s timeline to gain further clarity on such matters as initial ingress, dwell time, exfiltration, and so forth. We retained 413 cases, and those are the foundation of the report. The data offered in the downloadable dataset has been further redacted to ensure customer confidentiality.

Active_Adversary_Report

Active_Adversary_Report 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Active_Adversary_Report

Active_Adversary_Report 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README