Malpedia Library

Click here to download all references as Bib-File.•

2022-03-09 ⋅ Medium Invictus Incident Response ⋅ Invictus Incident Response
Set up Splunk for Incident Response in GCP in 15 minutes..

2022-02-23 ⋅ splunk ⋅ Shannon Davis, SURGe
An Empirically Comparative Analysis of Ransomware Binaries
Avaddon Babuk BlackMatter Conti DarkSide LockBit Maze Mespinoza REvil Ryuk

2022-01-27 ⋅ splunk ⋅ Splunk Threat Research Team
Threat Advisory: STRT-TA02 - Destructive Software
WhisperGate

2022-01-10 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting Malware Script Loaders using Remcos: Threat Research Release December 2021
Remcos

2021-11-11 ⋅ splunk ⋅ Splunk Threat Research Team
FIN7 Tools Resurface in the Field – Splinter or Copycat?
JSSLoader Remcos

2021-11-04 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting IcedID... Could It Be A Trickbot Copycat?
IcedID

2021-10-26 ⋅ splunk ⋅ Marcus LaFerrera
High(er) Fidelity Software Supply Chain Attack Detection

2021-07-21 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting Trickbot with Splunk
TrickBot

2021-07-06 ⋅ splunk ⋅ Splunk Threat Research Team
REvil Ransomware Threat Research Update and Detections
REvil

2021-07-05 ⋅ splunk ⋅ Ryan Kovar
Kaseya, Sera. What REvil Shall Encrypt, Shall Encrypt
REvil

2021-06-10 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting Password Spraying Attacks: Threat Research Release May 2021

2021-05-17 ⋅ splunk ⋅ Splunk Threat Research Team
DarkSide Ransomware: Splunk Threat Update and Detections
DarkSide

2021-05-11 ⋅ splunk ⋅ James Brodsky
The DarkSide of the Ransomware Pipeline
DarkSide

2021-05-03 ⋅ splunk ⋅ Splunk Threat Research Team
Clop Ransomware Detection: Threat Research Release, April 2021
Clop

2021-04-22 ⋅ splunk ⋅ Dave Herrald, Drew Church, James Brodsky, John Stoner, Katie Brown, Marcus LaFerrera, Michael Natkin, Mick Baccio, Ryan Kovar
SUPERNOVA Redux, with a Generous Portion of Masquerading
SUPERNOVA