Salem Cyber

Employee spotlight on Jon Bagg!

Who's that knocking at your door? ?? Find out in our new Suspicious Inbound Network Connection playbook! This playbook helps you detect if an unknown or untrusted system is attempting to establish a connection with an internal resource.

Where does Salem Cyber get its name? There are a variety of reasons (like our founder's love of Hocus Pocus ??♀?) but the name is in part inspired by Winston-Salem, our headquarters, which has its own spooky past. One of the most famous ghost ?? stories is The Little Red Man: Old Salem’s most famous ghost story begins nearly 250 years ago inside the Single Brothers House, where single men in the Salem community lived. One of those residents was shoemaker Andreas Kremser, a man of slight stature known to be a notorious — and often reckless — prankster. To keep Kremser busy, town leaders often assigned him laborious tasks such as cleaning chimneys and laying bricks. In 1786, he was asked to dig a cellar for an addition to the Single Brothers’ House. Days into the excavation, tragedy struck as the cellar floor beneath Kremser caved in, completely blanketing him in earth. A rescue effort ensued, and he was eventually dug out alive, but he’d die within hours and was buried in God’s Acre. After his passing, unusual phenomena began manifesting within the Single Brothers House. Some claimed to hear a shoemaker’s hammer tapping, while others claimed to have seen a small man in red floating through the hallways. Could this be Kremser? Most believed it was, especially since he was dressed in red the day he passed. Over the years, the brothers began attributing anything odd that happened to Kremser, nicknaming him the Little Red Man. This tradition continues today — as do the reported sightings — as the Single Brothers House now houses the offices for Old Salem Museum & Gardens. Happy Halloween ??

DLP is a pressing concern for many of our clients. In this Playbook, we give analysts tools for recognizing Data Exfiltration, a frequently used DLP tactic. For more playbooks and resources, visit our website.

Happy SOC Analyst Appreciation Day! As former cyber analysts, we know the job can be demanding and overwhelming. That's why we put together a series of Alert Triage Playbooks to help analysts tackle common cyber alerts. Check out our website for more!

Last week, the Salem Cyber team traveled to Philly and DC to attend NetDiligence? and speak at LimaCharlie's MSSN CTRL. A big thank you to our partners at Vendetta Cyber Defense for connecting us with so many great people in the Philadelphia cyber community. And thanks to LimaCharlie for hosting such a fantastic event full of amazing speakers!

Microsoft Sentinel is the fastest growing SIEM in the market with 2000% YoY growth. We've seen this growth firsthand with the customers we serve as they find Sentinel an effective yet cost efficient tool. We remain excited to be a Microsoft partner as we grow together! source: Cribl report

Great insights by The Cyber Security Hub? on the future of AI in cybersecurity. Here are some trends we are excited about: ?? AI is moving from assistive to autonomous roles, particularly in data-intensive tasks ???? ?Human-AI collaboration is emerging as a key model, especially in complex decision-making scenarios ?? AI is excelling in speed and pattern recognition, outperforming humans in many routine tasks The cybersecurity industry is moving towards a model where AI handles the bulk of routine, data-intensive tasks (like alert triage), allowing human experts to focus on more strategic and creative cybersecurity tasks.

Interesting new statistics by IBM regarding data breaches: ?? 2.22M - The average cost savings for organizations that used security AI and automation?extensively in prevention versus those that didn’t. ?? 4.88M - The global average cost of a data breach in 2024—a 10% increase over last year?and the highest total ever. We're excited to continue to see the positive impact of adopting security AI and automation in fighting data breaches!

We're excited to announce that Salem is integrated with Splunk! With this integration, Salem is now able to: 1?? Automatically triage Splunk alerts and notable events 2?? Use Splunk search to add context to alerts 3?? Trigger Splunk actions to automate response actions 4?? Update Enterprise Security incident status and comments Want to see if Salem works with your security tools? ?? Message us to find out! We offer seamless integrations with top cybersecurity solutions like Splunk.