Investigating a Turncloak: A case study on when Axiom Cyber and Verakey intersect with a malicious insider

Insider threats continue to pose a major risk to organizations. Organizations spent an average of $15.38 million in 2021 to deal with insider threats — up 34% from the $11.45 million in 2020. The number of insider incidents has increased by a staggering 44.3% in a single year, from 2020 to 2021. Data theft is the leading insider threat activity. Forty-two percent of insider threat events involved intellectual property (IP) or data theft.

Digital forensic examiners inevitably are needed for insider threat investigations and analysis. This presentation will provide a case study overview of a malicious insider investigation where both Axiom Cyber and VeraKey proved to be invaluable tools in the investigation. The goal of the presentation is knowledge sharing on how DFIR personnel can leverage these tools for that particular use case.

Not all products are available in all regions and may be restricted to specific customer types