A Note from the CTO:

Building BlindSPOT is fun, full stop.

Both the development and tradecraft teams get the chance to solve difficult challenges and puzzles with the direct goal of making BlindSPOT a better tool for you to answer the question “What would happen if…”. 

Of course, because we are performing the same behavior that attackers do, the same defenses that get put in place to stop them, stop us.  We don’t just end up building simulations that mimic the same behavior that threat actors do, we end up acting like threat actors through the whole development lifecycle.   

A lot of the updates we do to agents, payloads, and other components are all geared to making sure that BlindSPOT provides an effective tool in your toolbox. 

• Effective to build realistic simulations, encapsulating the tradecraft we bring (or the tradecraft you bring).
• Effective at being easy to execute and fast to get results from.
• Effective to rapidly deploy and scale testing across your environment.
• Effective to generate useful metrics that help you understand how you will perform against real adversaries.

We’re excited to see how the new features help you improve your defenses, and what ideas they generate for you.  As always, we’d love to hear from you on what you think about BlindSPOT, and where we can help you answer the question “What would happen if…”.

OK, on to the show!

-Ben Finke, OnDefend Co-Founder/CTO

New PowerShell Module

Learn More About Alert Validation

One Last Thing….

Thank you for taking the time to read our newsletter. We are committed as an organization to continue pushing boundaries within the world of innovation, BlindSPOT is the product of that.

If you want to stay in the loop about what’s happening at OnDefend & BlindSPOT, including our upcoming webinars, the latest cybersecurity trends, and product updates, then follow us on Facebook, Twitter, and LinkedIn @ondefend.