Open Threat Research

Ever since I joined the Microsoft Threat Intelligence Center (MSTIC) R&D team, I have been learning about Azure Resource Manager (ARM)…

In Part 2 of this series I would like to describe the architecture and workflow PurpleSharp implements to execute simulations.

PurpleSharp is an open source adversary simulation tool written in C# that executes adversary techniques within Windows Active Directory

On April 21st, 2020, the ATT&CK evals team released the results of their APT29 evaluation , the emulation plan, all payloads used for Day…

A few weeks ago, I was going over some of the research topics in my to-do list, and the one that sounded interesting to work on during 4th…

In late 2019, the ATT&CK Evaluations team evaluated 21 endpoint security vendors to provide insight and transparency over their true…