Prior to launching an attack, threat actors need to pay for, build, or borrow the infrastructure needed. They set up servers, obtain or reuse IP addresses, and register domains to use. This often happens before they even perform reconnaissance on their targets or create the malicious payload. And all of this activity leaves fingerprints about the attack. Cisco Umbrella Investigate provides global intelligence to help security teams hunt and identify these threat fingerprints before the kill chain begins.
