The Anatomy of a Modern Cyberattack
Unlock insights from the front lines of incident response and threat research.
The Unit 42 2026 Global Incident Response Report confirms that 87% of modern attacks span multiple surfaces as attackers blend activity across endpoints, cloud, SaaS and identity. By the time defenders realize what’s happening, the adversary has already established persistence and begun exfiltrating data.
In this Unit 42® Cybercrime Casefiles session, our Incident Response expert, Margaret Kelley, breaks down, step by step, how modern attacks actually unfold, from initial breach to impact, based on what we see investigating thousands of global incidents each year.
You’ll learn how to:
Track the intruder: See how attackers gain access, move laterally and escalate across on-prem, cloud and SaaS environments.
Decode adversary tradecraft: Understand the tactics, techniques and procedures (TTPs) that threat actors use to evade controls, stay hidden and establish persistence.
Expose blind spots: Understand where security controls and processes can fail and how attackers exploit those gaps.
Witness breaches unfold through the attacker's eyes and see how Unit 42 partners with clients to restore critical operations and prevent future attacks.
Meet the Speakers:
Margaret Kelley
Principal Consultant,
Unit 42
