Homepage
Open in app
Sign in
Get started
FalconForce
A team of highly specialized security professionals
Follow
Latest
Trending
Olaf Hartong
in
FalconForce
Oct 15, 2021
Sysmon vs Microsoft Defender for Endpoint, MDE Internals 0x01
Read more…
278
Arnau Ortega
in
FalconForce
Apr 26
Arbitrary 1-click Azure tenant takeover via MS application
In this blog post I explain how reply URLs…
Read more…
3
Olaf Hartong
in
FalconForce
Feb 12, 2021
FalconFriday — Masquerading; LOLBin file renaming— 0xFF0C
Read more…
15
Olaf Hartong
in
FalconForce
Jan 14, 2022
FalconFriday — Suspicious named pipe events — 0xFF1B
Read more…
20
Arnau Ortega
in
FalconForce
Jul 23
Automating the enumeration of missing reply URLs in Azure multitenant apps
Read more…
Henri Hambartsumyan
in
FalconForce
Feb 12, 2020
Reducing your Office 365 attack surface — Part 1: Hardening a vanilla Office 365
Read more…
49
1 response
Nikos Karouzos
in
FalconForce
Jan 26
SOAPHound — tool to collect Active Directory data via ADWS
SOAPHound is a custom-developed .NET data…
Read more…
17
Olaf Hartong
in
FalconForce
Oct 13, 2023
Microsoft Defender for Endpoint Internals 0x05 — Telemetry for sensitive actions
Read more…
72
Olaf Hartong
in
FalconForce
Jul 1, 2022
Microsoft Defender for Endpoint Internals 0x02 — Audit Settings and Telemetry
Read more…
86
1 response
Henri Hambartsumyan
in
FalconForce
Aug 14, 2020
Introducing Falcon Friday
Every two weeks on “Falcon Friday”, we’ll release hunting queries to detect…
Read more…
5
About
FalconForce
A team of highly specialized security professionals
More information
Followers
686
Elsewhere