l{"id":1203361,"date":"2023-03-14T13:22:35","date_gmt":"2023-03-14T13:22:35","guid":{"rendered":"https:\/\/www.businesstelegraph.co.uk\/turning-the-tables-on-the-network-intruder-techbeacon\/"},"modified":"2023-03-14T13:22:35","modified_gmt":"2023-03-14T13:22:35","slug":"turning-the-tables-on-the-network-intruder-techbeacon","status":"publish","type":"post","link":"https:\/\/www.businesstelegraph.co.uk\/turning-the-tables-on-the-network-intruder-techbeacon\/","title":{"rendered":"Turning the Tables on the Network Intruder &#8211; TechBeacon"},"content":{"rendered":"<p> <script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<!-- newscabal uk text -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:inline-block;width:728px;height:90px\"\r\n     data-ad-client=\"ca-pub-8162386273903324\"\r\n     data-ad-slot=\"3688094655\"><\/ins>\r\n<script>\r\n(adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><br \/>\n<\/p>\n<div>\n<p>Spy novels often involve operatives who have long been trying to infiltrate an organization. Waiting, learning, picking their mark, not being too rash, being very patient and strategic until finally they see their opportunity, make their play, and have a breakthrough. The play worked perfectly, they have now gained trust; they are now &#8220;on the inside.&#8221;\u00a0The stakes are now raised significantly for the operative, who must evade being uncovered while carrying out their mission. A top operative may remain uncovered, coming and going without raising any eyebrows\u2014but even the best can make one misstep. When only one error is required,\u00a0the tables are tilted in favor of the defender, not the infiltrator.<\/p>\n<p>Let&#8217;s apply this to <a href=\"https:\/\/techbeacon.com\/app-dev-testing\/information-security-needs-community-6-ways-build-your-teams\" target=\"_blank\" rel=\"noopener\">information security<\/a>.<\/p>\n<p>Let&#8217;s now illustrate this with an extreme\u2014but nonetheless actual\u2014real world example. The moral of the story could well be: &#8220;You only need to catch them once!&#8221;<\/p>\n<p>A world-class <a href=\"https:\/\/techbeacon.com\/app-dev-testing\/6-reasons-hire-red-team-harden-your-app-sec\" target=\"_blank\" rel=\"noopener\">red team<\/a> was conducting an operation against an organization that,\u00a0at that time, was under rapid growth and had reasonable security visibility\u2014but was also still building out components and improving its detection and response capabilities.<\/p>\n<p>After a significant recon phase and trying a few fruitless avenues of attack, the <a href=\"https:\/\/techbeacon.com\/security\/modern-red-teaming-21-resources-your-security-team\" target=\"_blank\" rel=\"noopener\">red team<\/a> was able to determine the software version of an externally facing system, for which they then built out a lab replica and developed a <a href=\"https:\/\/techbeacon.com\/security\/researcher-leaks-ugly-zero-day-plan-irresponsible-disclosure\" target=\"_blank\" rel=\"noopener\">zero-day<\/a> exploit\u2014tailor made for that target. At a time of their choosing, the red team launched the zero-day at the externally facing system\u2014compromising it.\u00a0The red team had a good day, and the defenders just had their first bad day (but they didn&#8217;t know it <i>quite <\/i>yet). This is where the advantage shifted, however;\u00a0the red team now had to evade detection systems that they didn&#8217;t even have knowledge of.<\/p>\n<p>Meanwhile, the defenders were doing their best with what they had. They had been successful every day up to this point, fending off millions of attempts (including from this attacker). Quite separately, the defenders had developed a &#8220;<a href=\"https:\/\/en.wikipedia.org\/wiki\/Leet\" rel=\"nofollow noopener\" target=\"_blank\"><span>leetspeak<\/span><\/a>&#8221;\u00a0search that would alert on seeing hacker leetspeak <a href=\"https:\/\/techbeacon.com\/enterprise-it\/monitoring-demystified-guide-logging-tracing-metrics\" target=\"_blank\" rel=\"noopener\">patterns in logs<\/a>. It was never expected to work against a red team; it was designed to catch script kiddies, proof-of-concept exploits, and commodity attackers.<\/p>\n<p>In this case, the red team had\u00a0named a particular element of their exploit something along the lines of\u00a0&#8220;pwnedby31337&#8243;\u2014perhaps forgetting to rename it from their lab version to some innocuous looking name that would have easily gone unnoticed. When this element invariably appeared in logs, it was more than enough to trigger the leetspeak-search alert\u2014which ran every hour against the log repository. To wit, the red team had made one small <a href=\"https:\/\/techbeacon.com\/security\/cybercriminal-intent-when-good-opsec-met-bad-opsec\" target=\"_blank\" rel=\"noopener\">OPSEC<\/a> blunder leading to their detection;\u00a0they had their first bad day while the <a href=\"https:\/\/techbeacon.com\/security\/combating-cyber-threats-cyber-resilience\" target=\"_blank\" rel=\"noopener\">blue team<\/a> had one very good day.<\/p>\n<p>While this may appear a far-flung or a &#8220;lucky blue team&#8221;\u00a0case, the reality is that many attackers have suboptimal operational security. Red teams are skilled in offense, but aren&#8217;t primarily focused on defense and detection evasion. Even those with excellent OPSEC can make mistakes and oversights.<\/p>\n<p>The good news is that\u00a0taking advantage of this does not always involve heavy or expensive lifting. For network evidence alone, there are even free open-source tools that have thriving communities, constantly churning out improvements and detection content for significant exploits (such as involving the <a href=\"https:\/\/techbeacon.com\/security\/solarwinds-hack-whos-blame-its-complicated\" target=\"_blank\" rel=\"noopener\">Solarwinds\u00a0Orion hack<\/a> and the <a href=\"https:\/\/www.ncsc.gov.uk\/information\/log4j-vulnerability-what-everyone-needs-to-know\" rel=\"nofollow noopener\" target=\"_blank\">Log4Shell vulnerability<\/a>). Furthermore, bespoke detection content can be created specifically to the environment being defended.<\/p>\n<p>There are two basic elements that enable this detection:<\/p>\n<p>First, we need the <strong>evidence\/data\/visibility<\/strong>. Call it what makes sense to you, but the essence is that we can&#8217;t detect what we can&#8217;t see. We need raw logs\u2014not just more alerts that aren&#8217;t tuned or targeted to\u00a0what you&#8217;re looking for and have no context to help you understand them.<\/p>\n<p>Secondly, we need <strong>search logic<\/strong>. This\u00a0can broadly be fitted into two types. The first involves specific indicators (&#8220;We are looking for this particular thing&#8221;). This may involve looking for specific <a href=\"https:\/\/techbeacon.com\/enterprise-it\/counter-security-threats-machine-learning-real-time-data-analytics\" target=\"_blank\" rel=\"noopener\">APT<\/a> toolsets, for example. (Another example would be the real-life one described\u00a0above, involving a leetspeak search.)<\/p>\n<p>The second involves\u00a0anomalous behavior (&#8220;We are looking for weird things&#8221;).\u00a0To look for anomalous behavior, defenders must first know what is normal in the environment.\u00a0This\u00a0is much easier said than done, but it&#8217;s not hopeless. Again, an attacker needs\u00a0only one bad day to give the defenders an advantage\u2014and attackers tend to be noisy once they gain a foothold and try to learn about the environment.\u00a0They need to discover, for instance, where to find key data and\u00a0who\u00a0the users with privileged access are. They tend to learn this information\u00a0by scanning, (for instance, through brute-forcing, using\u00a0such tools as nmap or\u00a0Bloodhound, or taking advantage of\u00a0LDAP). Then, they strike.<\/p>\n<p>Examples of abnormal activity may include such red flags as:<\/p>\n<ul>\n<li>A Secure Shell Protocol (SSH) session from the laptop of someone in HR,<\/li>\n<li>Remote Desktop Protocol access being granted to a domain controller for a machine\u00a0<em>not<\/em>\u00a0from the sysadmin group, or<\/li>\n<li>Brute-force scanning from an internal desktop machine.<\/li>\n<\/ul>\n<p>It is often said that defense is harder to achieve than an attack.\u00a0This is mostly true, but only up to the point where most people focus\u2014&#8221;left of boom&#8221;.\u00a0After a compromise, however, the tables are turned and defenders take the\u00a0advantage. It behooves organizations not only to protect against compromise\u00a0but, in parallel,\u00a0to assume compromise and detect it.<\/p>\n<p>Fundamentally, this means that organizations should collect artifacts\/evidence\/logs at intelligent levels of abstraction that scale.<\/p>\n<p>None of this is easy, but without data,\u00a0&#8220;no logs, no crime!&#8221;<\/p>\n<p>\t\t\t\t<amp-image-lightbox id=\"lightbox1\" layout=\"nodisplay\"\/>\n\t\t\t<\/div>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block; text-align:center;\"\r\n     data-ad-layout=\"in-article\"\r\n     data-ad-format=\"fluid\"\r\n     data-ad-client=\"ca-pub-8162386273903324\"\r\n     data-ad-slot=\"7859258044\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><br \/>\n<br \/><a href=\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp\">READ SOURCE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Spy novels often involve operatives who have long been trying to infiltrate an organization. Waiting, learning, picking their mark, not being too rash, being very patient and strategic until finally they see their opportunity, make their play, and have a breakthrough. The play worked perfectly, they have now gained trust; they are now &#8220;on the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1203362,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_oct_exclude_from_cache":false,"footnotes":""},"categories":[53],"tags":[],"class_list":["post-1203361","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Turning the Tables on the Network Intruder - TechBeacon - Business Telegraph<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Turning the Tables on the Network Intruder - TechBeacon - Business Telegraph\" \/>\n<meta property=\"og:description\" content=\"Spy novels often involve operatives who have long been trying to infiltrate an organization. Waiting, learning, picking their mark, not being too rash, being very patient and strategic until finally they see their opportunity, make their play, and have a breakthrough. The play worked perfectly, they have now gained trust; they are now &#8220;on the [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp\" \/>\n<meta property=\"og:site_name\" content=\"Business Telegraph\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-14T13:22:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/03\/Turning-the-Tables-on-the-Network-Intruder-TechBeacon.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"1365\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"businesstelegraph\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"businesstelegraph\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/turning-the-tables-on-the-network-intruder-techbeacon\/\"},\"author\":{\"name\":\"businesstelegraph\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78\"},\"headline\":\"Turning the Tables on the Network Intruder &#8211; TechBeacon\",\"datePublished\":\"2023-03-14T13:22:35+00:00\",\"dateModified\":\"2023-03-14T13:22:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/turning-the-tables-on-the-network-intruder-techbeacon\/\"},\"wordCount\":954,\"publisher\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#organization\"},\"image\":{\"@id\":\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/03\/Turning-the-Tables-on-the-Network-Intruder-TechBeacon.jpg\",\"articleSection\":[\"security\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/turning-the-tables-on-the-network-intruder-techbeacon\/\",\"url\":\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp\",\"name\":\"Turning the Tables on the Network Intruder - TechBeacon - Business Telegraph\",\"isPartOf\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#primaryimage\"},\"image\":{\"@id\":\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/03\/Turning-the-Tables-on-the-Network-Intruder-TechBeacon.jpg\",\"datePublished\":\"2023-03-14T13:22:35+00:00\",\"dateModified\":\"2023-03-14T13:22:35+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#primaryimage\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/03\/Turning-the-Tables-on-the-Network-Intruder-TechBeacon.jpg\",\"contentUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/03\/Turning-the-Tables-on-the-Network-Intruder-TechBeacon.jpg\",\"width\":1024,\"height\":1365},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.businesstelegraph.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Turning the Tables on the Network Intruder &#8211; TechBeacon\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#website\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/\",\"name\":\"Business Telegraph UK\",\"description\":\"business, tech and industry news\",\"publisher\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.businesstelegraph.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#organization\",\"name\":\"Business Telegraph UK\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png\",\"contentUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png\",\"width\":500,\"height\":177,\"caption\":\"Business Telegraph UK\"},\"image\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78\",\"name\":\"businesstelegraph\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/author\/businesstelegraph\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Turning the Tables on the Network Intruder - TechBeacon - Business Telegraph","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp","og_locale":"en_GB","og_type":"article","og_title":"Turning the Tables on the Network Intruder - TechBeacon - Business Telegraph","og_description":"Spy novels often involve operatives who have long been trying to infiltrate an organization. Waiting, learning, picking their mark, not being too rash, being very patient and strategic until finally they see their opportunity, make their play, and have a breakthrough. The play worked perfectly, they have now gained trust; they are now &#8220;on the [&hellip;]","og_url":"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp","og_site_name":"Business Telegraph","article_published_time":"2023-03-14T13:22:35+00:00","og_image":[{"width":1024,"height":1365,"url":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/03\/Turning-the-Tables-on-the-Network-Intruder-TechBeacon.jpg","type":"image\/jpeg"}],"author":"businesstelegraph","twitter_card":"summary_large_image","twitter_misc":{"Written by":"businesstelegraph","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#article","isPartOf":{"@id":"https:\/\/www.businesstelegraph.co.uk\/turning-the-tables-on-the-network-intruder-techbeacon\/"},"author":{"name":"businesstelegraph","@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78"},"headline":"Turning the Tables on the Network Intruder &#8211; TechBeacon","datePublished":"2023-03-14T13:22:35+00:00","dateModified":"2023-03-14T13:22:35+00:00","mainEntityOfPage":{"@id":"https:\/\/www.businesstelegraph.co.uk\/turning-the-tables-on-the-network-intruder-techbeacon\/"},"wordCount":954,"publisher":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#organization"},"image":{"@id":"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#primaryimage"},"thumbnailUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/03\/Turning-the-Tables-on-the-Network-Intruder-TechBeacon.jpg","articleSection":["security"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.businesstelegraph.co.uk\/turning-the-tables-on-the-network-intruder-techbeacon\/","url":"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp","name":"Turning the Tables on the Network Intruder - TechBeacon - Business Telegraph","isPartOf":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#primaryimage"},"image":{"@id":"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#primaryimage"},"thumbnailUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/03\/Turning-the-Tables-on-the-Network-Intruder-TechBeacon.jpg","datePublished":"2023-03-14T13:22:35+00:00","dateModified":"2023-03-14T13:22:35+00:00","breadcrumb":{"@id":"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#primaryimage","url":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/03\/Turning-the-Tables-on-the-Network-Intruder-TechBeacon.jpg","contentUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/03\/Turning-the-Tables-on-the-Network-Intruder-TechBeacon.jpg","width":1024,"height":1365},{"@type":"BreadcrumbList","@id":"https:\/\/techbeacon.com\/security\/turning-tables-network-intruder?amp#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.businesstelegraph.co.uk\/"},{"@type":"ListItem","position":2,"name":"Turning the Tables on the Network Intruder &#8211; TechBeacon"}]},{"@type":"WebSite","@id":"https:\/\/www.businesstelegraph.co.uk\/#website","url":"https:\/\/www.businesstelegraph.co.uk\/","name":"Business Telegraph UK","description":"business, tech and industry news","publisher":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.businesstelegraph.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.businesstelegraph.co.uk\/#organization","name":"Business Telegraph UK","url":"https:\/\/www.businesstelegraph.co.uk\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/","url":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png","contentUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png","width":500,"height":177,"caption":"Business Telegraph UK"},"image":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78","name":"businesstelegraph","url":"https:\/\/www.businesstelegraph.co.uk\/author\/businesstelegraph\/"}]}},"_links":{"self":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/posts\/1203361","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/comments?post=1203361"}],"version-history":[{"count":0,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/posts\/1203361\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/media\/1203362"}],"wp:attachment":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/media?parent=1203361"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/categories?post=1203361"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/tags?post=1203361"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}