Anton Ovrutsky

Senior Threat Research Engineer

Anton Ovrutsky leverages his 10+ years of expertise and experience as a BSides Toronto speaker, C3X volunteer, and an OSCE, OSCP, CISSP, CSSP and KCNA certificate holder in his role at Sumo Logic's Threat Labs. He enjoys the defensive aspects of cybersecurity and loves logs and queries. When not diving into the details of security, he enjoys listening to music and cycling.

投稿者 Anton Ovrutsky

ブログ

Responding to CVE-2024-3094 - Supply chain compromise of XZ Utils

Find assets in your network vulnerable to CVE-2024-3094 and respond to threats with Sumo Logic.

ブログ

Hunt for cloud session anomalies with Cloud SIEM

Learn how to hunt for cloud session anomalies resulting from phishing attacks or stolen cloud credentials. Read how to threat hunt in a cloud-native world where the impossible is possible.

ブログ

Protecting identities with the Sumo Logic platform

Check out this blog to learn how the Sumo Logic platform can help you protect your enterprise identities while reducing manual labor for SOC analysts.

ブログ

How to execute an Azure Cloud purple team exercise

Purple teaming exercises can be an excellent source for threat detection avenues. Learn how to execute an Azure Cloud purple team flow with Cloud SIEM.

ブログ

Threat hunting with Sumo Logic: The Command Line

The command line is a critical data source for threat hunters and detection engineers, learn more about how to utilize it in this blog

ブログ

Responding to remote service appliance vulnerabilities with Sumo Logic

There has been a noticeable uptick in remote service appliance vulnerabilities, learn how to respond to these threats with Sumo Logic in this blog.

ブログ

Building a Kubernetes purple teaming lab

Learn how to build and create a home lab for Kubernetes threat detection engineering and purple teaming.

ブログ

Find threats: Cloud credential theft on Linux endpoints

How your cloud credentials are stored on Linux endpoints could lead to unforeseen risks. Learn how Sumo Logic helps you hunt for and monitor malicious activity.

ブログ

Detection notes: In-memory Office application token theft

Microsoft Office Applications store credential material in memory. Learn how attackers are pivoting to these processes for sensitive authentication material theft.

ブログ

Find threats: Cloud credential theft on Windows endpoints

How your cloud credentials are stored on Windows endpoints could lead to unforeseen risks. Learn how Sumo Logic helps you hunt for and monitor malicious activity.