Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

• UAT-8302 and its box full of malware

  Cisco Talos Intelligence

  T1053.005 100% T1087.002 98% T1055.001 97%
  1 day ago
• A Practical Guide to BloodHound Data Collection

  Black Hills InfoSec

  T1588.002 88% T1087.002 78% T1482 60%
  6 days ago
• DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy

  Check Point Research

  T1053.005 100% T1490 100% T1486 100%
  2026-04-20
• The 60ms Window: How Event 5156 Solves the ADWS Attribution Problem

  Huntress

  T1087.002 69% T1482 31%
  2026-04-09
• The ADWS Architecture That Hides PowerShell AD Enumeration

  Huntress

  T1087.002 98% T1059.001 97% T1482 93%
  2026-04-08
• SDFlags | Huntress

  Huntress

  T1482 93% T1069.002 72% T1098.007 64%
  2026-01-15
• From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

  The DFIR Report

  T1486 99% T1003.003 99% T1218.007 98%
  2025-11-04
• From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

  The DFIR Report

  T1218.011 100% T1055.001 100% T1555.003 99%
  2025-09-29
• DomCat: A Domain Categorization Tool

  Black Hills InfoSec

  T1482 48%
  2025-09-24
• Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

  The DFIR Report

  T1003.001 100% T1046 99% T1021.001 99%
  2025-09-08
• Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware

  Trend Micro Research

  T1486 100% T1190 99% T1069.001 97%
  2025-08-20
• Hide Your RDP: Password Spray Leads to RansomHub Deployment

  The DFIR Report

  T1078 100% T1486 99% T1003.001 99%
  2025-06-30
• New Ransomware Reporting Requirements Kick in as Victims Increasingly Avoid Paying

  Coveware

  T1219 99% T1486 98% T1482 96%
  2024-01-26
• Investigating New INC Ransom Group Activity | Huntress

  Huntress

  T1486 99% T1021.001 93% T1585.002 92%
  2023-08-11
• PNPT: Certification Review

  Black Hills InfoSec

  T1087.002 83% T1482 47%
  2023-01-31
• Improved Security and Backups Result in Record Low Number of Ransomware Payments

  Coveware

  T1021.002 99% T1486 97% T1485 95%
  2023-01-20
• How To Disable LLMNR & Why You Want To

  Black Hills InfoSec

  T1482 45% T1484.001 31% T1557.001 30%
  2018-06-07