On December 13th 2020, it was unveiled by FireEye that SolarWinds has been impacted by a sophisticated supply chain compromise affecting their SolarWinds Orion software.
Welcome to Threat Hunt Deep Dives, Episode 2! Today we are looking at Application Shimming which can be used as a persistence mechanism on Microsoft Windows. Join us as we put this threat under the microscope.
Application Shimming is a malicious technique on Microsoft Windows operating systems in which Application Shim’s are abused to establish persistence, inject DLLs, elevate privileges, and
I think it is safe to say that 2020 has proven to be a year of fear, uncertainty, and doubt, and the data supports that threat actors
Threat hunting techniques don’t always have to be super advanced or complicated to yield beneficial results. There are a number of threat hunts that are simple
A lot has been said about threat hunting, by a lot of people. They’ll tell you how difficult it is, what products you should use, how to automate the pain away, and how you should’ve been doing this all along. But here’s the thing…you have been doing it all along.
Watch the recording of the Black Hat Webcast Series to listen to our speakers as they present the need to know information on practical threat hunting.
A lot has been said about threat hunting, by a lot of people. They’ll tell you how difficult it is, what products you should use,
Last year, during a routine code review, Qualys discovered a Remote Command Execution (RCE) vulnerability in the Exim Mail Transfer Agent (MTA) mail server. The
Introduction Threat hunting activities can generate tremendous benefit for organizations, and not just in finding hidden active threats in the environment. When done regularly, threat
