Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2022-01-16 ⋅ forensicitguy ⋅ Tony Lambert
Analyzing a CACTUSTORCH HTA Leading to Cobalt Strike
CACTUSTORCH Cobalt Strike
2022-01-09 ⋅ forensicitguy ⋅ Tony Lambert
Inspecting a PowerShell Cobalt Strike Beacon
Cobalt Strike
2022-01-04 ⋅ forensicitguy ⋅ Tony Lambert
Extracting Indicators from a Packed Mirai Sample
Mirai
2022-01-03 ⋅ forensicitguy ⋅ Tony Lambert
A Tale of Two Dropper Scripts for Agent Tesla
Agent Tesla
2022-01-02 ⋅ forensicitguy ⋅ Tony Lambert
Analyzing a Magnitude EK Appx Package Dropping Magniber
Magniber
2022-01-01 ⋅ forensicitguy ⋅ Tony Lambert
Analyzing an IcedID Loader Document
IcedID
2021-12-02 ⋅ Red Canary ⋅ Tony Lambert
KMSPico and Cryptbot: A spicy combo
CryptBot
2021-08-05 ⋅ Red Canary ⋅ Brian Donohue, Dan Cotton, Tony Lambert
When Dridex and Cobalt Strike give you Grief
Cobalt Strike DoppelDridex DoppelPaymer
2021-03-09 ⋅ Red Canary ⋅ Brian Donohue, Katie Nickels, Tony Lambert
Microsoft Exchange server exploitation: how to detect, mitigate, and stay calm
CHINACHOPPER
2021-02-18 ⋅ Red Canary ⋅ Tony Lambert
Clipping Silver Sparrow’s wings: Outing macOS malware before it takes flight
Silver Sparrow
2021-01-06 ⋅ Red Canary ⋅ Tony Lambert
Hunting for GetSystem in offensive security tools
Cobalt Strike Empire Downloader Meterpreter PoshC2
2020-07-22 ⋅ Red Canary ⋅ Tony Lambert
Connecting Kinsing malware to Citrix and SaltStack campaigns
Kinsing
2020-05-07 ⋅ Red Canary ⋅ Tony Lambert
Introducing Blue Mockingbird
2019-05-01 ⋅ Red Canary ⋅ Tony Lambert
FrameworkPOS and the adequate persistent threat
Grateful POS