Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

• UAT-8302 and its box full of malware

  Cisco Talos Intelligence

  T1053.005 100% T1087.002 98% T1055.001 97%
  1 day ago
• VECT: Ransomware by design, Wiper by accident

  Check Point Research

  T1486 99% T1679 95% T1059.012 90%
  2026-04-28
• Could your choice of metrics be harming your SOC?

  NCSC UK

  T1059.001 88% T1654 57%
  2026-04-27
• IR Trends Q1 2026: Phishing reemerges as top initial access vector, as attacks targeting public administration persist

  Cisco Talos Intelligence

  T1021.001 99% T1486 96% T1556.006 86%
  2026-04-22
• Auditing Salesforce Permission Hierarchies with ForceHound

  NetSPI

  T1525 90% T1654 65% T1588.002 42%
  2026-04-17
• The ADWS Architecture That Hides PowerShell AD Enumeration

  Huntress

  T1087.002 98% T1059.001 97% T1482 93%
  2026-04-08
• vSphere and BRICKSTORM Malware: A Defender's Guide

  Mandiant

  T1654 98% T1078.001 79% T1556.003 72%
  2026-04-02
• Continuous Malware Intelligence: Replacing Retro Hunts With Hindsight in Real Time

  Stairwell

  T1654 57%
  2026-03-19
• The LDAP Whitespace Problem | Huntress

  Huntress

  T1087.002 82% T1654 52%
  2025-12-30
• The OID Problem: Writing LDAP Detections That Actually Work

  Huntress

  T1087.002 98% T1558.003 96% T1003.006 80%
  2025-12-16
• Dealing with Imperfect Telemetry | Huntress

  Huntress

  T1021.006 79% T1654 77% T1078.001 58%
  2025-10-21
• Wrangling Windows Event Logs with Hayabusa & SOF-ELK (Part 2)

  Black Hills InfoSec

  T1654 83%
  2025-10-01
• Wrangling Windows Event Logs with Hayabusa & SOF-ELK (Part 1)

  Black Hills InfoSec

  T1654 90%
  2025-09-17
• Hide Your RDP: Password Spray Leads to RansomHub Deployment

  The DFIR Report

  T1078 100% T1486 99% T1003.001 99%
  2025-06-30
• Introduction to Zeek Log Analysis

  Black Hills InfoSec

  T1095 98% T1654 92% T1071.004 86%
  2025-01-13
• Pentesting, Threat Hunting, and SOC: An Overview

  Black Hills InfoSec

  T1654 92% T1059.004 45% T1595 41%
  2024-10-31
• How Logging Strategies Can Affect Cyber Investigations w/ Kiersten & James

  Black Hills InfoSec

  T1059.001 99% T1654 97% T1685.001 87%
  2024-09-23
• Making Sense of Alphabet Soup: 16 Security Terms and Acronyms You Should Know | Huntress

  Huntress

  T1056.001 100% T1486 99% T1219 97%
  2024-09-18
• In Through the Front Door – Protecting Your Perimeter

  Black Hills InfoSec

  T1654 95% T1190 76%
  2024-03-28
• Initial Access Operations Part 1: The Windows Endpoint Defense Technology Landscape

  Black Hills InfoSec

  T1055.001 99% T1068 99% T1654 79%
  2024-02-22
• dmXProtect: Stop, Drop, Shut Malware Down

  Huntress

  T1553.001 96% T1543.001 84% T1654 78%
  2023-06-28
• Cybersecurity Is a Social, Policy, and Wicked Problem

  TaoSecurity (Bejtlich)

  T1654 37%
  2023-06-25
• Your Browser is Not a Safe Space

  Black Hills InfoSec

  T1555.003 99% T1005 69% T1657 48%
  2023-03-14
• Parsing Sysmon Logs on Microsoft Sentinel

  Black Hills InfoSec

  T1654 96% T1055.001 40%
  2023-03-07
• The Methods Behind a Huntress Managed Antivirus Investigation | Huntress

  Huntress

  T1569.002 84% T1550.002 74% T1021 63%
  2023-01-19
• PlumHound Reporting Engine for BloodHoundAD

  Black Hills InfoSec

  T1087.002 93% T1098 53% T1654 45%
  2022-12-06
• Windows Event Logs for Red Teams

  Black Hills InfoSec

  T1055.001 99% T1685.001 84% T1654 53%
  2022-08-08
• A Sysmon Event ID Breakdown – Updated to Include 29!!

  Black Hills InfoSec

  T1070.004 100% T1574.001 98% T1021.001 97%
  2021-01-08
• Webcast: The SOC Age Or, A Young SOC Analyst’s Illustrated Primer

  Black Hills InfoSec

  T1654 56%
  2020-10-26
• Webcast: Infosec Mentoring | How to Find and Be a Mentor & Mentee

  Black Hills InfoSec

  T1588.002 33% T1654 32%
  2020-10-19
• Breaking Down the Door to Emergency Services through Cellular IoT Gateways

  F5 Labs

  T1654 79% T1584.008 47% T1584.005 37%
  2018-08-09
• Let’s Go Hunting! How to Hunt Command & Control Channels Using Bro IDS and RITA

  Black Hills InfoSec

  T1040 99% T1572 96% T1059.001 84%
  2017-09-13
• How To Do Endpoint Monitoring on a Shoestring Budget – Webcast Write-Up

  Black Hills InfoSec

  T1059.001 82% T1654 79% T1685.001 75%
  2017-07-10
• PowerShell Logging for the Blue Team

  Black Hills InfoSec

  T1059.001 98% T1654 37% T1685.001 33%
  2016-12-12
• Security’s Blind Spot: Application Layer Visibility

  F5 Labs

  T1654 60%
  2016-11-14