All Stories

(Trying to) hunt for a hidden scheduled task

Microsoft DART released an article yesterday of how the malware known as Tarrask has been using scheduled tasks for defense evasion. This malware has been in use by an APT group known...

In threat hunting, Apr 13, 2022
(Trying to) hunt for a hidden scheduled task

How to start with host based threat hunting?

How to start with host based threat hunting?

In threat hunting, Apr 10, 2022
How to start with host based threat hunting?

Featured

  1. Hunting for Windows Subsystem for Linux based attacks
    In threat hunting,
  2. The DFIR thing
    In dfir,
  3. OpenCTI RSS feed support
    In threat intelligence,
  4. Threat Intelligence Platform - OpenCTI
    In threat intelligence,