Resources
Featured Content
5 Threat Hunting Tips from a Seasoned Hunt Team
The threat hunting community is quite small. As a result of that, the threat hunting community is also very tight knit. This can make breaking
5 Threat Hunting Tips from a Seasoned Hunt Team
The threat hunting community is quite small. As a result of that, the threat hunting community is also very tight knit. This can make breaking
WEBINARS
Hunting for CONTI: TTPs Not IOCs
The Conti ransomware is one of the most well-known and feared ransomware operations around, primarily because of their prolific targeting and ruthless efficiency. This has
Thinking Like a Threat Actor: Hunting the Ghost in the Machine
An advanced adversary has bypassed the perimeter defenses, moved inside the environment, and become a literal ghost in the machine, free to move from system
Begin Your Hunt: The Threat Hunting Workshop
You’ve read the threat hunting blogs. You’ve followed some of the tutorials and deep dives on YouTube. You might have even started to sift through
BLOGS
Cyber Threat Hunting – What Is It, Really?
Cyber threat hunting is a sub-discipline to threat detection that relies on proactive and iterative searching through data to identify otherwise undetected threats. It does
Threat Hunting Certification, Courses, and Materials: A Starting Guide
I think one of the most common questions that gets asked in our webinars, our fireside chats, and random emails that come in from up-and-coming
6 More Threat Hunting Tools Everyone in the Industry Should Be Using!
One thing every threat hunter knows is that there is often more than one way to skin a… ahem… digital cat. And a lot of
White papers
The Threat Hunter’s Hypothesis
A case for structured threat hunting and how to make it work in the real world. While every large organization wants to threat hunt, many
Threat Hunting Framework
Threat Hunting can be challenging for organizations, especially when they don’t know where to start. Cyborg Security’s “Threat Hunting Framework” makes it easy to get
The Content Revolution
There’s a Content Problem. We have the Solution. Quality threat content can make or break threat hunting and detection efforts. Unfortunately, many security teams struggle
Cyborg Labs
Threat Hunt Deep Dives: User Account Control Bypass Via Registry Modification
User Account Control (UAC) Bypass is a clever method that can be used for privilege escalation either manually or via scripts and can be exploited
Ransomware: Hunting for Inhibiting System Backup or Recovery
Ransomware continues to be a hot button issue for organizations around the world. APT actors, commodity malware operators and even attackers who had never used
Living off the Land (LotL) – RDP Hijacking
In this instalment of Cyborg Security’s latest series “Living off the Land,” we will cover the topic of RDP hijacking. Specifically, we will look at
Videos
Threat Hunt Deep Dives Ep. 10 – Get to Know Your Logs Pt. 2
Registry keys can be a very useful method for hunting and detecting malicious activity, but if they are ingested wholesale they can also be one of the noisiest methods of detection. However, if organizations take the time to understand how registry keys can be used to help detect malicious activity, they can help security teams improve their security posture significantly. Join Cyborg Security’s Lee Archinal in his second instalment of our Threat Hunt Deep Dive series “Get to Know Your Logs!”
