SaaS incident response

SaaS Ransomware Observed in the Wild for Sharepoint in Microsoft 365
Background Obsidian’s Threat Research team has observed a SaaS ransomware attack against a company’s Sharepoint Online (Microsoft 365) without using a compromised endpoint. Our team and product were leveraged post-compromise to determine ...