All Stories

(Trying to) hunt for a hidden scheduled task

Microsoft DART released an article yesterday of how the malware known as Tarrask has been using scheduled tasks for defense evasion. This malware has been in use by an APT group known...

In threat hunting, Apr 13, 2022
(Trying to) hunt for a hidden scheduled task

How to start with host based threat hunting?

How to start with host based threat hunting?

In threat hunting, Apr 10, 2022
How to start with host based threat hunting?

Featured

  1. Fine tune for detection success
    In SOC, AI,
  2. Autonomous SOC, part 3, GUI and further agents
    In SOC,
  3. Machine Learning for Threat Hunting
    In Threat Hunting,
  4. Autonomous SOC, part 2, isolating agent
    In SOC,
  5. Why Your Threat Hunting Program Is Working (Even When It Finds Nothing)
    In threat hunting,
  6. OpenCTI RSS feed support
    In threat intelligence,
  7. Threat Intelligence Platform - OpenCTI
    In threat intelligence,