Click here to download all references as Bib-File.
| 2022-07-28 ⋅ SentinelOne ⋅ Living Off Windows Defender | LockBit Ransomware Sideloads Cobalt Strike Through Microsoft Security Tool Cobalt Strike LockBit |
| 2022-04-27 ⋅ Sentinel LABS ⋅ LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility Cobalt Strike LockBit BRONZE STARLIGHT |
| 2022-04-27 ⋅ Sentinel LABS ⋅ LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility Cobalt Strike LockBit |
| 2022-04-18 ⋅ SentinelOne ⋅ From the Front Lines | Peering into A PYSA Ransomware Attack Chisel Chisel Cobalt Strike Mespinoza |
| 2022-03-29 ⋅ SentinelOne ⋅ From the Front Lines | Hive Ransomware Deploys Novel IPfuscation Technique To Avoid Detection Cobalt Strike Hive |
| 2020-12-23 ⋅ Sentinel LABS ⋅ SolarWinds | Understanding & Detecting the SUPERNOVA Webshell Trojan SUPERNOVA BRONZE SPIRAL |
| 2020-12-23 ⋅ Sentinel LABS ⋅ SolarWinds | Understanding & Detecting the SUPERNOVA Webshell Trojan SUPERNOVA |
| 2020-12-18 ⋅ Sentinel LABS ⋅ SolarWinds SUNBURST Backdoor: Inside the APT Campaign SUNBURST |
| 2020-06-02 ⋅ Lastline Labs ⋅ Evolution of Excel 4.0 Macro Weaponization Agent Tesla DanaBot ISFB TrickBot Zloader |
| 2020-03-10 ⋅ Lastline ⋅ IQY files and Paradise Ransomware Paradise |
| 2018-08-06 ⋅ rinse and REpeat analysis ⋅ Reversing Cerber - RaaS Cerber |