tl;dr: Target had recently installed what sounds like it might be an above average intrusion detection system from FireEye, a Bangalore office was monitoring it and reported several incidents, one of which sounds like a solid tell, to the Minneapolis security operations center, where all were ignored.
Unknown: did the system produce a lot of false positives? Was, or could the Bangalore team be any good at filtering them, if there was such a problem?
A couple of bottom lines: they're going to get figuratively crucified for this. And maybe we understand just a bit more why they've been so opaque in reporting on this debacle.
1 comment
[ 4.6 ms ] story [ 15.0 ms ] threadUnknown: did the system produce a lot of false positives? Was, or could the Bangalore team be any good at filtering them, if there was such a problem?
A couple of bottom lines: they're going to get figuratively crucified for this. And maybe we understand just a bit more why they've been so opaque in reporting on this debacle.