threat-hunting

November 2020

SOC-Class: Use Case Development

May 2020

ZLoader 4.0 Macrosheets Evolution

March 2020

COVID-19 Scare Tactics: Want to buy some masks?

Getting Sneakier: Hidden Sheets, Data Connections, and XLM Macros

December 2019

Threat Hunting On Your Own Network With InQuest

September 2019

Adobe XMP: Tales of an Overlooked Anchor

Advanced Support for the SOC Hunter

July 2019

Base64 Encoded Powershell Pivots

April 2019

Analysis of an Interesting Malicious HTA File

March 2019

Analyzing Sophisticated PowerShell Targeting Japan

January 2019

Extracting "Sneaky" Excel XLM Macros

August 2018

Threat Hunting IQY files with YARA

May 2018

Phorpiex malware spreads GandCrab phishing emails

RetroHunt: Retrospective Analysis for Threat Hunters

February 2018

InQuest Deployed by DISA in the Joint Regional Security Stack (JRSS)

October 2017

Microsoft Office DDE SEC OMB Approval Lure

Microsoft Office DDE Macro-less Command Execution Vulnerability