MALWARE YEARS USED RUNONLY TO DETECTION HOW TO
MALWARE YEARS USED RUNONLY TO DETECTION UPDATE

Oliver Rochford at Brim Security’s Knowledge FunnelĪnalyzing Qakbot using Brim’s No-code threat hunting.(Wednesday) – Emotet epoch 2 infection with Trickbot gtag mor13.thru – Six items of malspam received by my admin email.– Emotet infection from Epoch 1 botnet.(Thursday) – Pcap and malware for an ISC diary (Rig EK).(Tuesday) – Pcap and malware for an ISC diary (Hancitor).Brad Duncan at Malware Traffic Analysis.RisingSun: Decoding SUNBURST C2 to Identify Infected Hosts Without Network TelemetryĪ Global Perspective of the SideWinder APT.SolarWind Attack: Italy activates the Cyber Security Nucleus.SolarWinds: Insights into Attacker Command and Control Process.Sunburst backdoor – code overlaps with Kazuar.SolarWinds Orion Breach – What It Means for the Industry Writ Large.

MALWARE YEARS USED RUNONLY TO DETECTION UPDATE

Update on SolarWinds Supply-Chain Attack: SUNSPOT and New Malware Family Associations.Robust Indicators of Compromise for SUNBURST.Increasing resilience against Solorigate and other sophisticated attacks with Microsoft Defender.Nation-states are taking their supply-chain attack strategy from the cybercriminal underground.FireEye & SolarWinds Follow-Up with Senior SOC Analyst Tony Robinson.Nothing New Under the Sun: Wait Until it Bursts or Re-think the Approach?.The Devil’s in the Details: SUNBURST Attribution.Protecting Against Supply Chain Attacks by Profiling Suppliers.SUNSPOT: An Implant in the Build Process.

Start triage with already set YARA rules for SUNBURST.

New Findings From Our Investigation of SUNBURST.

More Solarwinds! Including an update from Solarwinds on their investigation.

Microsoft Teams and Skype Logging Privacy Issue Log Analysis in DFIR Using Jupyter Notebook

Bintang Nafsul Mutmainnah at MII Cyber Security Consulting Services.

Remote Acquisition of Apple’s New M1-Based Endpoints with Magnet AXIOM CyberĪ journey into IoT Forensics – Episode 5 – Analysis of the Apple HomePod and the Apple Home Kit Environment (aka thanks RN Team!).

Tips for Managing Cloud Workloads Securely.

Magnet Weekly CTF – Grand Prize Challenge Gaining Access 101: A Simple Guide to Data ExtractionsĪmazon Kindle and its Experimental Browser: the Start of a Forensic Analysis

MALWARE YEARS USED RUNONLY TO DETECTION HOW TO

How To Extract Passwords From The Acquired Windows Registry With Passware.

How To Efficiently Decrypt TrueCrypt/VeraCrypt Encryption Using Passware.

Your AV is Trying to Tell You Something: syslog.logĭumpster Diving in Google Photos Android App: “local_trash.db” The program has been released, and because it’s virtual, anyone can join easily through the magic of the Internets. As always, thanks to those who give a little back for their support!ĭFRWS APAC 2021 is almost here! Only a week and a half to go.

Malware years used runonly to detection