Threat Intelligence

Novel Malware written in PowerShell uses advanced techniques to avoid detection — Breakdown Adlumin Threat Research released the initial details of a new discovery they made targeting the U.S. aerospace defense industry vertical. …

Nowdays rganizations face a relentless onslaught of cyber threats. The traditional security measures, such as firewalls and antivirus software, are no longer sufficient to protect against sophisticated and evolving attacks. This is where threat hunting comes into play. By actively seeking out threats within a network, organizations can proactively identify…

The name Clop (often stylized Cl0p) refers to both Ransomware-as-a-Service (RaaS) and the threat group that develops and markets it (sometimes called the Clop gang or Clop group). …

Problem Currently, there is a lack of “free” tools that effectively support threat hunters in creating comprehensive documentation. Whether using OneNote or Google Docs, they all lack proper formatting, particularly in the code block section. Additionally, there are a few other desired features: A few other wants that I was looking…

The Soviet Union was famous for its espionage techniques during the Cold War. One of the most effective tactics in their arsenal was the use of Trojan Horses. A Trojan Horse is a covert agent who infiltrates an organization or country with the intention of gathering intelligence or influencing policy…

Introduction In today’s dynamic cybersecurity landscape, organizations rely on Next-Generation Firewalls (NGFWs) as a critical component of their network security infrastructure. While NGFWs provide a solid foundation for protection, they face a significant challenge in depending on a single proprietary threat intelligence source to identify and block malicious activities. To…

Welcome back to this series on building threat hunting tools. In this series, I will be showcasing a variety of threat hunting tools that you can use to hunt for threats, automate tedious processes, and extend to create your own toolkit! The majority of these tools will be simple, with…

Welcome to “Mastering Microsoft Sentinel: A Comprehensive Guide” In this article, we delve into the world of Microsoft Sentinel (formerly known as Azure Sentinel), a powerful cloud-native security information and event management (SIEM) & security orchestration, automation, and response (SOAR) solution. Whether you’re new to the field of cybersecurity or…

In today’s hyperconnected world, organizations face an ever-increasing number of cyber threats. To safeguard critical assets and proactively defend against malicious actors, establishing a robust threat intelligence pipeline is crucial. This blog post provides a comprehensive guide to setting up a threat intelligence pipeline, empowering organizations to gather, analyze, and…