ITOps
Glossary

An APT or an advanced persistent threat is a stealthy threat actor that gains illegal access to a computer network and remains hidden for a prolonged period. An APT is typically a nation-state or state-sponsored group. Their main purpose is mainly political or economic. Every major business sector has recorded instances of cyberattacks by APTs seeking to steal, spy, or

Agile IT refers to IT operations that enable teams to adapt to changing requirements and consistently handle the complexities of emerging technologies. Although agile methodologies are usually synonymous with software development teams sprinting to code, test, and release products and applications, IT service delivery can also benefit by connecting development, security, and operations teams, instead of limiting them to organization

IT operations are more complex than ever owing to heterogeneous environments and increasing tool stack. It requires a breadth of IT monitoring capabilities to quickly identify and resolve critical issues before they wreak havoc on the business. But alert volumes captured from different monitoring tools become overbearing. IT teams become frustrated with "alert fatigue" because they have to sort through and triage individual events

Alert fatigue or alarm fatigue occurs when IT teams are exposed to a large number of frequent alarms (alerts) that consequently become desensitized. It leads to longer response times or missing essential alarms. Large volumes of alarms, especially false ones, result in several unintended outcomes. Some consequences are a disruption in IT services, anxiety in teams, distrust in monitoring systems, and missed critical events. Some additional

Alert noise is listed as one of the biggest problems faced by DevOps teams. 79% of IT Ops personnel listed reduction in alert noise as one of their top priorities. False alarms pull time and resources away from issues that truly need to be addressed. It is compounded if you're receiving false alerts at the same time as the right alerts.

Anomaly detection is the process of distinguishing a genuine security alert from false positives alerts in a SOC (Security Operations Center). Anomalies are a strong indicator of cyber threat triggered by unexpected but legitimate malicious actions.

A software that has been designed to detect and prevent contagions like viruses and malware from affecting your systems. Originally, the antivirus software was used for removing computer viruses. However, they slowly got more sophisticated as the cyber threats themselves got more potent. Antivirus software eventually started to provide protection from browser hijackers, ransomware, keyloggers, backdoors, rootkits, trojan horses, worms, etc. While

The simulation of human intelligence in machines so that they programmed to think and act like humans. Artificial intelligence or AI plays a key role in modern industries and organizations. Netenrich’s goal is to provide highly-contextualized, resolution intelligence that comes via the confluence of artificial and human intelligence. Netenrich’s Attack Surface Intelligence uses impact analysis to measure the severity of potential threats and empowers your

Any data, device, or other components of the environment that supports information-related activities. When it comes to an organization's ecosystem, an asset is a component (such as data or device) that supports information-related activities. Assets generally include hardware (e.g. servers), software (apps), and confidential information. Your SOC team must be able to guarantee the Confidentiality, Integrity, and Availability of assets from

Governance, risk management, and compliance aim to assure an organization reliably achieves objectives, addresses uncertainty, and acts with integrity. Governance is the combination of processes established and executed by the leaders in the company that is reflected in the organization's structure. Risk management is predicting and managing IT asset risks that could hinder the company from reliably achieving its objectives

Asset lifecycle management is the process of increasing organizational productivity by helping them make informed decisions on IT needs and services. IT teams can make better purchasing decisions by looking at various assets and their lifecycle stages. If a particular asset is about to expire, and if it's already in the inventory, teams will have more lead time to order

IT asset risk intelligence is the organization's ability to gather insights across its systems that help identify uncertainties; present them in the business context; enable the firm to make more informed business and security decisions in a proactive manner. To manage asset risks effectively, such as the criticalities of business processes and enterprise infrastructure, including applications, servers, network devices, data

The potentially vulnerable points that exist across all software, hardware, firmware, and networks of your company. Your goal is to keep your attack surface as small as possible. An organization's attack surface is a term that describes all the potentially vulnerable points that exist across all software, hardware, firmware, and networks of your company. It is the sum of different attack

An automated incident response strategy enables your organization to be in a better position to take strong and quick actions in the event of an unexpected downtime to limit its effect on the overall business. Automation expedites typical repetitive tasks and responses, so little to no human intervention is required to detect and respond to incidents. Automation in incident response also helps

A blind spot is a hidden threat in a heterogeneous IT environment—something teams don't even know exist. And they have no way to get visibility into it until an outage happens. Ineffective monitoring capabilities and manual processes fail to shed light on these blind spots. They remain dormant for years until suddenly an issue crops up. Blind spots hinder root-cause analysis, which

A group of computers that have been compromised by malicious code and is now remotely operated by attackers. Botnet can be used to execute a bunch of attacks like DoS flooding, spamming, DNS spoofing, etc. The term botnet is a combination of the words "robot" and "network." It is a collection of devices or "bots" such as computers, phones, or IoT

A brute force attack is a cryptographic hack wherein the attacker manually guesses the different possible combinations of a targeted password and repeats the process until they land on the correct combination. A longer password will require more sophisticated combinations. Brute force attacks are not the most efficient approach, but it's one of the easiest attacks to execute. As a part

A bug is a flaw or vulnerability in the software or hardware design that can be potentially exploited by the attackers. These security bugs can be used to exploit various vulnerabilities by compromising – user authentication, authorization of access rights and privileges, data confidentiality, and data integrity. Security bugs are caused by the lack of the following – basic/advanced dev training,

Unexpected or sudden network traffic volume peaks and troughs based on seasonal factors are commonly referred to as bursty traffic. Bursty traffic can create negative customer sentiment if not identified early and resolved.

A company policy that dictates whether or not employees can bring in their own devices to work. Bring your own device (BYOD), aka bring your own technology (BYOT) is a movement wherein organizations allow their employees to bring and use their own device over an officially provided one. This policy has been a huge hit with startups and smaller companies who