Threat Hunting//
Threat Hunting Case Study: Scattered Spider
Scattered Spider skips malware and breaks in with a phone call and a legitimate remote access tool, here's how to hunt for it.
Detection Validation: Going Atomic on False Negatives
Oct 13, 2020
Related Articles
Threat Hunting//
Threat Hunting Case Study: FileFix
FileFix bypasses Mark of the Web (MotW) protections by hijacking the Windows File Explorer address bar. Here is how to hunt for it.
Threat Hunting//
Threat hunting case study: Detecting IAB activity
Initial access brokers sell information about or access to compromised computers. Here's how to threat hunt for a known attack behavior involving PowerShell that's used by a prolific initial access broker.