CyRay
CyRay@infosec.exchange
<p>Autonomous threat detection for SOC teams and MSSPs. Mobula AI deploys 6000+ correlation rules in 48 hours — cloud or fully air-gapped. cyray.io</p>
Posts
-
View post
Last month your company got a new identity system. Nobody told the SOC. It is called Claude. Someone made themselves owner. Someone created an API key that never expires. Someone invited an outside domain. None of it reached your SIEM. Anthropic publishes the records (Admin API, Enterprise activity feed). CyRay now pulls both and runs detections on them. Every AI tool is an identity system wearing a chat window. Watch the door. https://cyray.io/integrations/claude #SecOps #Detecti...
-
View post
Can your SOC see a scheduled task being created? 🕵️♂️ schtasks /create is persistence in one built-in command, and a normal user can run it without admin rights. Safe test for a box you own: create a task that only exits, check your alerts, delete it. Caveat: a task registered from an XML file or via the Task Scheduler API is a quieter path some rules miss. Test and the Sigma rule here: https://cyray.io/test-your-soc/scheduled-task-creation #BlueTeam #DetectionEngineering #SOC #ThreatHunting...