Hello All,In this blog post we will explore and learn about various Windows Logon Types and understand how are these logon type events are generated. We will also see if we can extract credentials from individual logon types. We will be using our Active Directory…

ATT&CKcon 3.0 Day 1
Presented by Adam Pennington, MITRE ATT&CK lead.

Approved for public release. Distribution unlimited 21-00706-27.

Author/Credits: mdecrevoisier MITRE Att@ck is known for its Tactics & Techniques. Each and every attack is mapped with MITRE Att@ck. ATT&CK stands for adversarial tactics, techniques, and common knowledge. The tactics are a modern way of looking at cyberattacks.…

It’s that time of year again, time for another Kali Linux release! Quarter #2 - Kali Linux 2022.2. This release has various impressive updates, all of which are ready for immediate download or updating. The summary of the changelog since the 2022.1 release…

Back in 2005, Cory Altheide and I published the first paper on tracking USB storage devices across Windows systems; at the time, the focus ...

Develop advanced YARA rules based on malicious code reuse, to increase the malware detection accuracy and improve your threat hunting.

Tesla tells users to use the PIN to Drive feature as it works on a fix.

We have put together 6 threat hunting ideas that organizations and hunt teams can start using today to threat hunt in their environment.

Web3 is a newfound technology, and we expect significantly more security compared to web2. In fact, web3 is a new version of our old World…

Microsoft has shared guidance to help admins defend their Windows enterprise environments against KrbRelayUp attacks that enable attackers to gain SYSTEM privileges on Windows systems with default configurations.

Microsoft has released workaround guidance to address a remote code execution (RCE) vulnerability—CVE-2022-30190, known as "Follina"—affecting the Microsoft Support Diagnostic Tool (MSDT) in Windows. A remote, unauthenticated attacker could exploit this vulnerability…