What AI Agents Taught Me About the Autonomous SOC
When I talk about agentic AI and the path toward an autonomous SOC at Netenrich, I try to be specific rather than visionary - because the specificity...
Featured Report
A CISO Playbook for 2025 and Beyond Reactive Security
Security operations can’t run on hope, SIEMs, or spreadsheets anymore. This guide equips executive leaders to drive outcome-focused SecOps: powered by AI, contextual risk, and cloud-native data strategies.
Results for: Threat Intelligence
Blog
Why The Unified Security Data Lake Multiplies Everything
When we built the Resolution Intelligence Cloud, one of the early decisions that shaped everything else was committing to a Unified Data Model - a...
Blog
The True Vision Behind Cyber Risk Quantification
The Moment I Understood What We Were Really Building
About two years into the Netenrich 2.0 build, I had a conversation with one of our senior data...
Blog
NLP: Operationalizing AI Threat Detection
There is a specific inefficiency in how most organizations consume threat intelligence that I noticed early in Netenrich's security journey and have...
Blog
When Trust Becomes the Attack Surface: Understanding Modern Software Supply Chain Attacks
Most enterprise applications today are more integration projects than original code. Open-source libraries, third-party APIs, automated pipelines,...
Blog
Bootstrapping and Maximizing the Cybersecurity Budget
The decision to rebuild Netenrich without raising outside capital in 2018 was deliberate, and I want to explain the reasoning — not to celebrate...
Blog
Adversary Path Modeling: Proactive Threat Modeling
Lateral movement is one of the most important adversary techniques to detect - and one of the hardest. Here is why.
.webp?width=337&height=172&name=Business%20Email%20Compromise%20Detection%20%20A%2039-Minute%20Case%20Study%20(1).webp)
Blog
The 39-Minute Investigation: How Five Low-Severity Alerts Became a Confirmed Account Takeover
Business Email Compromise used to be relatively straightforward to describe: a phishing email, stolen credentials, an urgent wire transfer request....
Blog
The Biggest Flaw in Security Operations Architecture
There is a structural mismatch at the heart of most enterprise security operations that I find myself returning to constantly. Understanding it...
Blog
Using Graph Analytics for Lateral Movement Detection
There was a specific moment in an early customer engagement that changed how I thought about the security intelligence problem. We were analyzing the...
Blog
The Flywheel of SecOps Automation and Domain Memory
In conversations with security leaders, I often ask a question that produces a thoughtful pause: when your most experienced security analyst leaves,...
Blog
Turning Cyber Threat Intelligence Into Action
There is a specific moment in any security investigation when context changes everything. The analyst is looking at an alert. The raw data tells them...
Blog
How Innovation Gets Valued Among Cybersecurity Vendors
I want to tell the OpsRamp story honestly, because it contains a lesson about how enterprise technology markets work that every builder should...
Blog
Entity Resolution: The Foundation of Cross-Source UEBA
Early in the Netenrich 2.0 build, one of our data science leads surfaced a problem that seemed simple and proved to be genuinely hard: why...
Blog
Being the Underdog in the Security Operations Center (SOC)
Let me tell you something I mean without any false modesty: I genuinely love being the underdog.
Blog
What Machine Learning Threat Detection is Good At
After six years of applying machine learning to security operations problems at Netenrich, I want to share a grounded assessment of where ML...
Blog
GenAI: Building a Foundation for AI in Cybersecurity
When I talk about Netenrich's use of large language models and agentic systems, I sometimes get a specific question: how did you move so quickly?
Blog
The 3-minute Heist: Securing Modern Environments against Cloud Data Exfiltration.
Modern cloud environments have fundamentally changed how enterprise data is stored, accessed, and operationalized. Platforms like Google BigQuery now...
Blog
Non-Human Identity Security: Why Defending NHIs Requires Detection and Posture Working Together
Non-Human Identities (NHIs)—service accounts, automation tokens, CI/CD pipeline credentials, and cloud IAM roles—now outnumber human users in most...
Blog
Revolutionizing Telemetry: Announcing Praxis Intelligent Data Pipeline Management by Netenrich for Google SecOps
As modern enterprises scale, their security operations inevitably face a daunting challenge: managing the explosive volume of telemetry data. For...
.png?width=337&height=172&name=25%20weeks%20blogs%20banners%20(18).png)
Blog
Why Classification Fails in Security Data Analytics
When we started building the Resolution Intelligence Cloud in 2018, one of the first major investments we made was in something that would never...
.png?width=337&height=172&name=25%20weeks%20blogs%20banners%20(17).png)
Blog
How We Built a Team of Top Cybersecurity Talent
When I committed to making Netenrich a data-first, intelligence-first security company in 2018, I did something that made some people question my...
.png?width=337&height=172&name=25%20weeks%20blogs%20banners%20(15).png)
Blog
Left-Shifting Security Data Engineering Changes Everything
There is a pattern in how security programs try to improve detection quality that I have observed consistently, and that consistently produces...
Blog
Fighting AI with AI: Why Zero-Day Discovery Is Only Half the Battle
How Netenrich and Google AI Threat Defense close the loop between finding vulnerabilities and surviving exploitation
Blog
Why an AI SOC Can Make You Feel Safer Without Making You Safer
AI promises to transform the Security Operations Center and in many cases, it does. But a dangerous gap exists between the appearance of efficiency...
.png?width=337&height=172&name=25%20weeks%20blogs%20banners%20(14).png)
Blog
What Losing My Company Taught Me About Cyber Resilience
I want to tell you a story I don't talk about often enough. Not because it is painful, it no longer is. But because the lessons in it are the ones...
Blog
My Foolproof Guide to Ruining Your Security Operations Center (in 5 Easy Steps)
By Christopher Morales, CISO and Head of Security Strategy, Netenrich
I’ve spent enough time in this industry to see a lot of "innovative" approaches...
Blog
Beyond CMDBs: Modernizing IT Asset Management (ITAM)
The configuration management database is one of those enterprise systems that almost everyone has and almost no one fully trusts. I say this not as a...
Blog
Digital Tone: A New Approach to Digital Risk Protection
Most security frameworks describe the enterprise as a collection of assets: servers, endpoints, cloud instances, applications, users. You protect the...
Blog
The A.C.T. Framework for Vulnerability Prioritization
Security teams face a persistent vulnerability prioritization problem. At any given moment, there are more alerts, more vulnerabilities, more threat...
Blog
Cyber Risk Management: Fix the Roof Before the Rain
Most security frameworks describe the enterprise as a collection of assets: servers, endpoints, cloud instances, applications, users. You protect the...
Blog
Agentic SOC: The New Economics of Security Operations
I’ve been in this game for over two decades, and if there’s one thing that hasn’t changed, it’s our industry's obsession with throwing bodies and...
Blog
Attack Surface Management: One Question CISOs Must Answer
Ask any CISO in any organization of any size: do you know your complete attack surface right now?
Blog
Starting Over: A Blueprint for SOC Modernization
In 2018, I had just watched OpsRamp find its home at HPE. Six years of building a genuinely cloud-native IT operations platform - designed from the...
Blog
LiteLLM PyPI Supply Chain Attack: What Happened & How to Fix It
Overview
On March 24, 2026, two malicious versions of the litellm Python package - v1.82.7 and v1.82.8 - were published to PyPI as part of a broader...
Blog
The Great Security Lie: Why Buying More Tools (and Renting More Humans) Will Never Save You
From the CEO’s Desk
Raju Chekuri, Chairman, President & CEO of Netenrich, shares a candid perspective shaped by conversations with CISOs and CIOs...
Blog
Transform Financial Security with Autonomous SOC
A CISO's Mandate: Stop Traditional Outsourcing, Start Transforming
The Financial Sector Cannot Afford Yesterday's Security Model
The world has...
Blog
Outpacing Breaches: Why Continuous Security Validation and Alignment Win
Cyberattacks rarely begin with masterful exploits. They start with small lapses, a forgotten firewall rule, a disabled endpoint agent, an exposed...
Blog
Asset Visibility Gaps in Cybersecurity: How to Close Blind Spots Fast
On a regular Monday morning, Maya, an SOC lead, logs into her company’s asset inventory. Instead of clarity, she is greeted by something very...
Blog
Is Your SOC Stuck Reactive? Shift to Proactive Threat Hunting
Security Operations Centers (SOCs) are busier than ever. However, are they more effective? Alerts pile up, queues grow, and teams work nonstop just...
Blog
Is SOC Analyst Burnout Putting Your Org at Risk? Cut Noise with AI
The modern Security Operations Center (SOC) is drowning in noise. Each new security tool, from SIEMs to EDRs, brings its own stream of alerts, rules,...
Blog
Security Tool Sprawl Is Killing Efficiency – How to Consolidate
Most security teams don’t suffer from a lack of tools; they suffer from too many. Years of adding products to cover new threats have left many SOCs...
Blog
Incident Response Automation: Trusting Machines to Accelerate Recovery
Attackers move faster than defenders can blink. In 2024, the average breakout time for an attack dropped to 48 minutes, with some intrusions...
Blog
Unified Risk Management: Your Big Risk Isn’t Hackers, It’s Silos.
In today's digital landscape, seeing the full risk picture is no longer an advantage – it's a requirement for survival. Most enterprise security...
Blog
Beyond the Hype: The Hidden Risks Lurking in Your Enterprise AI
Artificial intelligence (AI) is no longer optional. It has become a necessity in almost every corporate environment. From product development and...
Blog
Hybrid Cloud Security Risks? How to Achieve Consistent Protection
Securing IT infrastructure is never simple, and hybrid cloud environments raise the stakes further. It’s like managing a single-family home alongside...
Blog
How to Prove Cybersecurity ROI to the Board
CISOs face a paradox. Despite multi-million-dollar investments, the average data breach still costs over $4.4M. The problem isn’t the tools; they...
Blog
AI in Security Operations: Transforming SOCs or Overhyped?
Why AI in Security Operations Matters Today
For more than 15 years, cybersecurity has made use of artificial intelligence (AI) and machine learning,...
Blog
Security Data Lake: Engineering for SOC Precision and Scale
Strapline: A security data lake is not a dumping ground - it’s a living, query-ready foundation for precision threat detection, AI-driven insights,...
Blog
Engineering Security Data Lakes for Cloud & Hybrid Environments
For today’s cloud-native enterprises, “security by default” is a dangerously misleading concept. Many digital-native organizations, whose entire...
Blog
Predictive & AI Threat Intelligence: Anticipating the Unseen Attacks
Cyber threats are everywhere. Not only that, they come from everywhere. So while we may win battles, it feels as though we are losing the war....
Blog
Incident Response Methodology: Engineering-led Approach
What is Incident Response Methodology?
Incident response methodology is the structured process organizations use to prepare for, detect, contain, and...
Blog
API Security Risks: How to Detect and Defend with AI
What Is API Security?
API Security is the practice of protecting the application programming interfaces (APIs) that power cloud-first enterprises
Blog
Top 5 SOC Best Practices to Overcome Modern SOC Challenges
Modern SOC Challenges in 2025
Security Operations Centers (SOCs) were designed for yesterday’s threats. In 2025, leaders face new realities:
Blog
How to Use Google Chronicle Ingestion API
Key Takeaways
- Use Chronicle Ingestion API to send logs directly into Google SecOps, eliminating the need for third-party forwarders.
- Prioritize...
Blog
Choosing the Right Data Ingestion Method for Your SecOps
Key Takeaways
- Every enterprise must plan a data ingestion strategy based on its data urgency, infrastructure, and compliance needs.
- While real-time...
Blog
Key Log Types for Google Chronicle: Importance and Ingestion
Key Takeaways
- Google Chronicle delivers value only if you feed it the right logs. Prioritize firewall, endpoint, authentication, and cloud logs to...
Blog
How to Optimize Log Ingestion in Hybrid Cloud Environments
Key Takeaways
- Hybrid cloud log ingestion is complex due to fragmented systems, compliance requirements, and platform-specific authentication.
- Tools...
Blog
Data Ingestion Challenges in SecOps and How to Overcome Them
Key Takeaways
- You must cleanup, normalize, and contextualize diverse data sources to ensure useful ingestion into Google SecOps.
- Data quality and...
Blog
A Step-by-Step Guide to the Data Ingestion Process
Key Takeaways
- Data ingestion is critical for advanced, data-driven Security Operations.
- Preprocessing and filtering reduces noise, costs, and false...
Blog
CISO Framework for SOC: Aligning Threats, Assets & Controls
Most security operations centers struggle with scale, complexity, and context. Teams are flooded with alerts from disconnected tools, each focused on...
Blog
Agentic AI for SecOps: Turbocharge Your Security Operations
The Rise of AI Agents for Cybersecurity in 2025
Cybersecurity in 2025 faces an unprecedented wave of AI-augmented threat actors. Attackers leverage...
Blog
Configuring Data Ingestion into Google Security Operations: A Step-by-Step Guide
Google Chronicle, part of Google SecOps, is a powerful tool for security data analysis at organizations regardless of size. Using the platform...
Blog
From Data to Decisions: Enhancing Situational Awareness in Security Operations with Data Analytics
Threat actors have continued to bypass advanced security tooling despite the forecast for enterprises worldwide to spend $212 billion on defensive...
Blog
Unlock Google Unified Security's Full Potential with Netenrich
Security leaders today aren’t just defending infrastructure. They are protecting business continuity, customer trust, and innovation at scale. The...
Blog
7 Cybersecurity Monitoring Tools Every SOC Analyst Should Master
The rise of sophisticated attack vectors, such as advanced persistent threats (APTs), ransomware, and zero-day exploits, has completely transformed...
Blog
Traditional MDR is Failing: 10 CISOs Share Their Learnings
The Chief Information Security Officer (CISO) role has transformed from being purely technical to becoming a strategic business leader. Today's CISOs...
Blog
Transforming Security Operations: Netenrich's Partnership with Google Cloud Security
The increasing complexity and scale of cyber threats—fueled by AI and sophisticated tactics—have forced organizations to rethink how they secure...
Blog
Scaling the Intelligent SOC: Challenges and Solutions for Data-Driven Operations
Security operations (SOC) leaders dream of having a fully scaled unit of security analysts equipped with advanced tools and automation to...
Blog
Engineering Intelligence: Why AI Alone Will Not Build Future-Ready SOCs (And What Will)
Today adaptable, context-aware SecOps are vital for managing advanced cyber threats. While AI lays the foundation for this SOC adaptability,...
Blog
From Sledgehammer to Scalpel: Rethinking Noise in the SOC
Low signal-to-noise ratios are slowing you down—here’s how to turn noise into clarity.
Blog
Intelligent Defense: How Netenrich Adaptive MDR™ Overcomes the Limitations of Traditional SIEMs
Traditional SIEMs just aren’t cutting it anymore. They rely on outdated, reactive measures that lead to inefficiencies, false positives, and missed...
Blog
Score Big with the Ultimate 49ers VIP Experience
Are you ready to take your NFL game day to the next level? Netenrich and Google are teaming up to offer an exclusive opportunity that combines the...
Blog
Bridging the Gap: Why Traditional MDR Falls Short and What's Next
In today's rapidly evolving threat landscape, the need for robust Managed Detection and Response (MDR) solutions has never been greater. Yet,...
Blog
Introducing Signal Analytics: Unifying Security Processes for Deeper Insights and Enhanced Adaptive MDR
Security is a delicate balance of trust and vigilance. To truly automate and innovate, analytics must be more than just powerful. They need to be...
Blog
Unlock Advanced Cybersecurity Skills with the Modern SecOps Masterclass on Coursera
As technology evolves at an unprecedented pace and artificial intelligence (AI) becomes an integral part of our daily lives, cybersecurity...
Blog
Netenrich Hybrid SOC and Security Tools Strategy Report 2024: Six Key Takeaways
In an era of escalating cyber threats, understanding the evolving landscape of security operations is crucial. Our recent Hybrid SOC and Security...
Blog
From Reactive to Proactive: Three Must-Haves to Transform Your SOC for the Digital Age
Remember Ferris Bueller? In a way, working in a SOC is like a high-stakes adventure straight out of Ferris’ playbook. Much like Ferris, who...
Blog
Transforming the SOC: Embracing Adaptive MDR and Autonomic Security Operations
The traditional Security Operations Center (SOC) is at a critical juncture. The familiar image of analysts constantly reacting to a relentless...
Blog
Adaptive MDR™: Not Your Average MDR Solutions
“In cybersecurity, the only constant is change.” This age-old adage continues to ring true as organizations navigate a shifting threat landscape with...
Blog
Red CryptoApp: A New Threat Group in the Ransomware World
This is a preliminary report based only on the data leak site (DLS), listed victims, and other observed patterns. A detailed investigation will...
Blog
Netenrich Earns Google Cloud SecOps Service Delivery Expertise Certification
As the first, exclusive pure-play Google SecOps partner, Netenrich is 100% committed to Google SecOps, Mandiant technology stacks as well as our...
Blog
Identity Behind Hunters International Ransomware Group’s Dedicated Leak Site Exposed
This article focuses on my research to uncoverthe identity of Hunters International ransomware group’s (Surface Web) Dedicated Leak Site (DLS). It...
Blog
Exposing Alpha Ransomware: A Deep Dive into Its Operations
Alpha ransomware, a distinct group not to be confused with ALPHV ransomware, has recently emerged with the launch of its Dedicated/Data Leak Site...
Blog
How to Achieve Autonomic Security Operations with Resolution Intelligence Cloud?
So, what’s a SOC? Some still believe they need a physical SOC building, where they can see, touch, and manage servers. Others feel it’s necessaryto...
Blog
Discovering the ADHUBLLKA Ransomware Family: Tracing the Roots of LOLKEK, BIT, OBZ, U2K, TZW Variants
This article is not an in-depth reverse-engineering analysis of a ransomware variant. Rather, it discusses the methods and different techniques...
Blog
Advanced Threat Hunting: Detecting Beaconing Attacks
Beaconing attacks can be difficult—but not impossible—to detect. The more you know about these stealthy attacks, the better you’ll be able to...
Blog
FraudGPT: The Villain Avatar of ChatGPT
With the rise of generative AI models, the threat landscape has changed drastically. Now, recent activities on the Dark Web Forum show evidence of...
Blog
Netenrich and Cybriant Partner to Move Upmarket and Scale Operations
Netenrich has entered into a strategic partnership with Cybriant, a leading managed security services provider (MSSP) that serves more than 1,400...
Blog
SANS Institute Evaluates Resolution Intelligence Cloud, Gives Thumbs Up
To keep an enterprise up and running, security is essential—and no doubt, why security teams keep more than busy. Day in, day out, they are...
Blog
What Is Detection Engineering?
Detection engineering is the process of designing and implementing systems, tools, and processes — for example, security information and event...
Blog
Beyond UEBA: A New Approach to Anomaly Detection and Situational Awareness
User entity and behavior analytics (UEBA) has been great at solving some significant shortcomings of SIEM (security information and event management)...
Blog
Netenrich is a Sample Related Vendor/Security Vendor in Gartner® report, Emerging Tech: Security — Emergence Cycle for Automated Moving Target Defense
According to the Gartner report, “Automated moving target defense (ATMD) technologies are paving the way for a new era of cyber defense...
Blog
EMA Names Netenrich a Leading Security Visionary and “Must See” Vendor at RSA 2023
Wondering what to see and who to visit at RSA 2023? Enterprise Management Associates (EMA) named Netenrich one of the top 10 “must see” vendors at...
Blog
3 Digital Transformation Questions CIOs Must Ask and Answer in 2023
Heading into 2023 with digital transformation still top of mind for most organizations, CIOs should focus less on what may be new and shiny and more...
Blog
SIEM vs. SOAR: The Right Security Tool
Security information and event management (SIEM) and security orchestration, automation, and response (SOAR) are complementary solutions.
Blog
SIEM 101 – Best Practices for Implementation
Security information and event management (SIEM) is about collecting, detecting, and responding. That is, collecting data into a single pane of glass...
Blog
UEBA, It's Just a Use Case
"UEBA, it’s just a use case." – Netenrich CISO Chris Morales
He’s not wrong. But I’d take it a step further. User entity and behavior analytics (...
Blog
Want to Optimize Threat Detection & Response? 5 Patterns vs. 500 Rules
One vendor uses 5 patterns, the other uses 500 rules. What’s better?
Anyone who has configured a SIEM or UEBA (e.g., QRadar, Splunk, ArcSight,...
Blog
Amp up Security: MITRE’s SOC Strategies Go to 11. But Can We Go Higher?
MITRE strategy 10 says measure performance to improve performance. It’s important to set a baseline of where resources spend their time and energy —...
Blog
How to Improve Cross-functional Collaboration Between the SOC and IT?
As MITRE points out in strategy 9 of its 11 Strategies of a World-class Cybersecurity Operations Center, cross-functional communication is key to a...
Blog
7 Steps to Smart Security Operations: RiskOps Resolutions for 2026
Digitalization initiatives evolved faster than digital operations in 2020, and 2021 widened the gap even further. But maybe that was a good thing.
Videos & Webinars
Driving Secure Operations with Data Efficacy and Analytics
Raju Chekuri, CEO and Chairman of Netenrich, talks about security challenges and the secure operations approach that Netenrich takes with the...
Case studies
Smarter Security, Faster Response: Inside Nuvama’s SOC Reinvention
Securing What Matters in Modern Finance
Case studies
Citrix and Cloud Software Group Transforms Security Operations with Netenrich Adaptive MDR
Cloud Software Group (CSG), a $4.5 billion global software leader, embarked on a transformative security operations modernization journey. Faced with...
Case studies
Rebuilding Trust: A Digital-First Marketing Giant’s Security Transformation
Facing a crisis of trust after its MDR vendor failed to disclose a security breach, this digital media company was determined to overhaul its...
Case studies
Modernizing Security for a Prominent Regional Bank
A prominent regional bank with over 80 branches across Southern California, headquartered in Los Angeles and backed by more than 2,000 employees...
Case studies
Supercharging Security Operations for Health Tech Organization
A major healthcare technology company, with over $800M in revenue had relied on Splunk for security operations. Over time, complexity increased,...
Case studies
Life Sciences Leader & Large US County Set Up New Security Platform in Hours
Resolution Intelligence Cloud™ operationalizes security at service-provider scale. It’s a cloud native, modern SaaS platform designed for ease of...
Case studies
How did MultiCare improve its Digital Infrastructure?
Discover how Netenrich's Resolution Intelligence Cloud helps MultiCare with its digital transformation challenges.
Case studies
SysTools boosts security, changes mindsets with Resolution Intelligence Cloud
Read how Resolution Intelligence Cloud™ transformed SysTools, a cybersecurity services provider.
Data Sheets
Netenrich Adaptive MDR™ for Google SecOps
Because a One-Size-Fits-All MDR ... Fits No One!
Not all businesses operate the same way, which is why a one-size-fits-all or standardized MDR has...
Data Sheets
Resolution Intelligence Cloud™ for Managing Business Risk
Resolution Intelligence Cloud is a cloud-native data analytics platform for managing risk and optimizing overall operations, with the scale and speed...
